CVE-2019-13616

Key facts

CVSS score

8.1 (v3.1)

Severity

HIGH

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Weakness (CWE)

CWE-125

EPSS score

3.7% (90th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2019-5051)

Published

July 16, 2019

NVD last modified

June 17, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• debian / debian linux
• fedoraproject / fedora
• fedoraproject / fedora
• fedoraproject / fedora
• libsdl / simple directmedia layer
• opensuse / backports sle
• opensuse / backports sle
• opensuse / leap
• opensuse / leap
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux workstation

Certified products that may be affected

24 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5089 - active
• Red Hat Enterprise Linux 8 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 4642 - historical
• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4458 - historical

See all 24 in the Security Certifications Explorer.

References

• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html(Mailing List, Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:3950(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:3951(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0293(Third Party Advisory)
• https://bugzilla.libsdl.org/show_bug.cgi?id=4538(Exploit, Issue Tracking, Vendor Advisory)
• https://lists.debian.org/debian-lts-announce/2021/01/msg00024.html(Mailing List, Third Party Advisory)
• https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html(Mailing List, Third Party Advisory)
• https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html(Mailing List, Third Party Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEH5RO7XZA5DDCO2XOP4QHDEELQQTYV2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UITVW4WTOOCECLLWPQCV7VWMU66DN255/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VDNX3RVXTWELBXQDNERNVVKDGKDF2MPB/
• https://security.gentoo.org/glsa/202305-17
• https://usn.ubuntu.com/4156-1/(Third Party Advisory)
• https://usn.ubuntu.com/4156-2/(Third Party Advisory)
• https://usn.ubuntu.com/4238-1/(Third Party Advisory)