CVE-2019-13734

Key facts

CVSS score

8.8 (v3.1)

Severity

HIGH

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-787

EPSS score

3.9% (90th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2019-5151)

Published

December 10, 2019

NVD last modified

June 17, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• debian / debian linux
• fedoraproject / fedora
• fedoraproject / fedora
• google / chrome
• opensuse / backports sle
• oracle / communications cloud native core network repository function
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• redhat / openshift container platform
• redhat / openshift container platform
• suse / linux enterprise
• suse / package hub

Certified products that may be affected

25 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
• Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5089 - active
• Red Hat Enterprise Linux 8 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 4642 - historical
• Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4458 - historical

See all 25 in the Security Certifications Explorer.

References

• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html(Mailing List, Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2019:4238(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0227(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0229(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0273(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0451(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0463(Third Party Advisory)
• https://access.redhat.com/errata/RHSA-2020:0476(Third Party Advisory)
• https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html(Vendor Advisory)
• https://crbug.com/1025466(Permissions Required, Vendor Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/
• https://seclists.org/bugtraq/2020/Jan/27(Mailing List, Third Party Advisory)
• https://security.gentoo.org/glsa/202003-08(Third Party Advisory)
• https://usn.ubuntu.com/4298-1/(Third Party Advisory)
• https://usn.ubuntu.com/4298-2/(Third Party Advisory)
• https://www.debian.org/security/2020/dsa-4606(Third Party Advisory)
• https://www.oracle.com/security-alerts/cpujan2022.html(Patch, Third Party Advisory)