kbrain

CVE-2019-1559

MEDIUM · CVSS 5.9EPSS 17.1%EU EUVD

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

Key facts

CVSS score
5.9 (v3.1)
Severity
MEDIUM
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE)
CWE-203
EPSS score
17.1% (97th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2019-10116)
Published
February 27, 2019
NVD last modified
June 17, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2019-10116 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.

View on the EU Vulnerability Database

Affected products

  • canonical / ubuntu linux
  • canonical / ubuntu linux
  • canonical / ubuntu linux
  • debian / debian linux
  • debian / debian linux
  • f5 / big-ip access policy manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip analytics
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application security manager
  • f5 / big-ip domain name system
  • f5 / big-ip edge gateway
  • f5 / big-ip fraud protection service
  • f5 / big-ip global traffic manager
  • f5 / big-ip link controller
  • f5 / big-ip local traffic manager
  • f5 / big-ip policy enforcement manager
  • f5 / big-ip webaccelerator
  • f5 / big-iq centralized management
  • f5 / traffix signaling delivery controller
  • f5 / traffix signaling delivery controller
  • fedoraproject / fedora
  • fedoraproject / fedora
  • fedoraproject / fedora
  • mcafee / agent
  • mcafee / data exchange layer
  • mcafee / threat intelligence exchange server
  • mcafee / web gateway
  • netapp / a220
  • netapp / a220 firmware
  • netapp / a320
  • netapp / a320 firmware
  • netapp / a800
  • netapp / a800 firmware
  • netapp / active iq unified manager
  • netapp / active iq unified manager
  • netapp / active iq unified manager
  • netapp / altavault
  • netapp / c190
  • netapp / c190 firmware
  • netapp / cloud backup
  • netapp / clustered data ontap antivirus connector
  • netapp / cn1610
  • netapp / cn1610 firmware
  • netapp / element software
  • netapp / fas2720
  • netapp / fas2720 firmware
  • netapp / fas2750
  • netapp / fas2750 firmware
  • netapp / hci compute node

and 81 more…

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain