Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-1559 Details

Description

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.9 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html	CVE	Mailing ListThird Party Advisory
https://access.redhat.com/errata/RHSA-2019:2304	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2437	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2439	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2471	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3929	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3931	CVE	Third Party Advisory
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e	CVE
https://kc.mcafee.com/corporate/index?page=content&id=SB10282	CVE	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html	CVE	Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/	CVE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/	CVE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/	CVE
https://security.gentoo.org/glsa/201903-10	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20190301-0001/	CVE	PatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20190301-0002/	CVE	Broken LinkThird Party Advisory
https://security.netapp.com/advisory/ntap-20190423-0002/	CVE	Third Party Advisory
https://support.f5.com/csp/article/K18549143	CVE	Third Party Advisory
https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS	CVE
https://usn.ubuntu.com/3899-1/	CVE	Third Party Advisory
https://usn.ubuntu.com/4376-2/	CVE	Broken Link
https://www.debian.org/security/2019/dsa-4400	CVE	Third Party Advisory
https://www.openssl.org/news/secadv/20190226.txt	CVE	Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	CVE	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html	CVE	Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	CVE	PatchThird Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	CVE	PatchThird Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	CVE	PatchThird Party Advisory
https://www.tenable.com/security/tns-2019-02	CVE	PatchThird Party Advisory
https://www.tenable.com/security/tns-2019-03	CVE	Third Party Advisory
http://www.securityfocus.com/bid/107174	CVE	Third Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html	[email protected]	Mailing ListThird Party Advisory
https://access.redhat.com/errata/RHSA-2019:2304	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2437	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2439	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2471	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3929	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3931	[email protected]	Third Party Advisory
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e	[email protected]
https://kc.mcafee.com/corporate/index?page=content&id=SB10282	[email protected]	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html	[email protected]	Mailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/	[email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/	[email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/	[email protected]
https://security.gentoo.org/glsa/201903-10	[email protected]	Third Party Advisory
https://security.netapp.com/advisory/ntap-20190301-0001/	[email protected]	PatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20190301-0002/	[email protected]	Broken LinkThird Party Advisory
https://security.netapp.com/advisory/ntap-20190423-0002/	[email protected]	Third Party Advisory
https://support.f5.com/csp/article/K18549143	[email protected]	Third Party Advisory
https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS	[email protected]
https://usn.ubuntu.com/3899-1/	[email protected]	Third Party Advisory
https://usn.ubuntu.com/4376-2/	[email protected]	Broken Link
https://www.debian.org/security/2019/dsa-4400	[email protected]	Third Party Advisory
https://www.openssl.org/news/secadv/20190226.txt	[email protected]	Vendor Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	[email protected]	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html	[email protected]	Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	[email protected]	PatchThird Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	[email protected]	PatchThird Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	[email protected]	PatchThird Party Advisory
https://www.tenable.com/security/tns-2019-02	[email protected]	PatchThird Party Advisory
https://www.tenable.com/security/tns-2019-03	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/107174	[email protected]	Third Party AdvisoryVDB Entry

see all 72 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-203	Observable Discrepancy	[email protected]

Affected Products

Product	Versions
openssl openssl	>= 1.0.2, < 1.0.2r
CPE cpe:2.3:a:openssl:openssl:::::::: Remediation No remediation found in references.
canonical ubuntu linux	16.04 18.04 18.10
CPE cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::* Remediation No remediation found in references.
debian debian linux	8.0 9.0
CPE cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:9.0:::::::* Remediation No remediation found in references.
netapp active iq unified manager	>= 7.3 >= 9.5
CPE cpe:2.3:a:netapp:active_iq_unified_manager::::::windows::* cpe:2.3:a:netapp:active_iq_unified_manager::::::vmware_vsphere::* cpe:2.3:a:netapp:active_iq_unified_manager:-:::::windows:: Remediation No remediation found in references.
netapp altavault	All versions
CPE cpe:2.3:a:netapp:altavault:-:::::::* Remediation No remediation found in references.
netapp cloud backup	All versions
CPE cpe:2.3:a:netapp:cloud_backup:-:::::::* Remediation No remediation found in references.
netapp clustered data ontap antivirus connector	All versions
CPE cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:::::::* Remediation No remediation found in references.
netapp element software	All versions
CPE cpe:2.3:a:netapp:element_software:-:::::::* Remediation No remediation found in references.
netapp hci management node	All versions
CPE cpe:2.3:a:netapp:hci_management_node:-:::::::* Remediation No remediation found in references.
netapp hyper converged infrastructure	All versions
CPE cpe:2.3:a:netapp:hyper_converged_infrastructure:-:::::::* Remediation No remediation found in references.
netapp oncommand insight	All versions
CPE cpe:2.3:a:netapp:oncommand_insight:-:::::::* Remediation No remediation found in references.
netapp oncommand unified manager	All versions
CPE cpe:2.3:a:netapp:oncommand_unified_manager:-:::::::* cpe:2.3:a:netapp:oncommand_unified_manager:-:::::vsphere:: Remediation No remediation found in references.
netapp oncommand unified manager core package	All versions
CPE cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:::::::* Remediation No remediation found in references.
netapp oncommand workflow automation	All versions
CPE cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::* Remediation No remediation found in references.
netapp ontap select deploy	All versions
CPE cpe:2.3:a:netapp:ontap_select_deploy:-:::::::* Remediation No remediation found in references.
netapp ontap select deploy administration utility	All versions
CPE cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:::::::* Remediation No remediation found in references.
netapp santricity smi-s provider	All versions
CPE cpe:2.3:a:netapp:santricity_smi-s_provider:-:::::::* Remediation No remediation found in references.
netapp service processor	All versions
CPE cpe:2.3:a:netapp:service_processor:-:::::::* Remediation No remediation found in references.
netapp smi-s provider	All versions
CPE cpe:2.3:a:netapp:smi-s_provider:-:::::::* Remediation No remediation found in references.
netapp snapcenter	All versions
CPE cpe:2.3:a:netapp:snapcenter:-:::::::* Remediation No remediation found in references.
netapp snapdrive	All versions
CPE cpe:2.3:a:netapp:snapdrive:-:::::unix:: cpe:2.3:a:netapp:snapdrive:-:::::windows:: Remediation No remediation found in references.
netapp snapprotect	All versions
CPE cpe:2.3:a:netapp:snapprotect:-:::::::* Remediation No remediation found in references.
netapp solidfire	All versions
CPE cpe:2.3:a:netapp:solidfire:-:::::::* Remediation No remediation found in references.
netapp steelstore cloud integrated storage	All versions
CPE cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:::::::* Remediation No remediation found in references.
netapp storage automation store	All versions
CPE cpe:2.3:a:netapp:storage_automation_store:-:::::::* Remediation No remediation found in references.
netapp storagegrid	>= 9.0.0, <= 9.0.4
CPE cpe:2.3:a:netapp:storagegrid:::::::: cpe:2.3:a:netapp:storagegrid:-:::::::* Remediation No remediation found in references.
netapp hci compute node	All versions
CPE cpe:2.3:h:netapp:hci_compute_node:-:::::::* Remediation No remediation found in references.
f5 big-ip access policy manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_access_policy_manager:::::::: Remediation No remediation found in references.
f5 big-ip advanced firewall manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_advanced_firewall_manager:::::::: Remediation No remediation found in references.
f5 big-ip analytics	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_analytics:::::::: Remediation No remediation found in references.
f5 big-ip application acceleration manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_application_acceleration_manager:::::::: Remediation No remediation found in references.
f5 big-ip application security manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_application_security_manager:::::::: Remediation No remediation found in references.
f5 big-ip domain name system	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_domain_name_system:::::::: Remediation No remediation found in references.
f5 big-ip edge gateway	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_edge_gateway:::::::: Remediation No remediation found in references.
f5 big-ip fraud protection service	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_fraud_protection_service:::::::: Remediation No remediation found in references.
f5 big-ip global traffic manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_global_traffic_manager:::::::: Remediation No remediation found in references.
f5 big-ip link controller	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_link_controller:::::::: Remediation No remediation found in references.
f5 big-ip local traffic manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_local_traffic_manager:::::::: Remediation No remediation found in references.
f5 big-ip policy enforcement manager	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_policy_enforcement_manager:::::::: Remediation No remediation found in references.
f5 big-ip webaccelerator	>= 12.1.0, <= 12.1.5 >= 13.0.0, <= 13.1.3 >= 14.0.0, <= 14.1.2 >= 15.0.0, <= 15.1.0
CPE cpe:2.3:a:f5:big-ip_webaccelerator:::::::: Remediation No remediation found in references.
f5 big-iq centralized management	>= 6.0.0, <= 6.1.0 >= 7.0.0, <= 7.1.0
CPE cpe:2.3:a:f5:big-iq_centralized_management:::::::: Remediation No remediation found in references.
f5 traffix signaling delivery controller	>= 5.0.0, <= 5.1.0 4.4.0
CPE cpe:2.3:a:f5:traffix_signaling_delivery_controller:::::::: cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:::::::* Remediation No remediation found in references.
tenable nessus	<= 8.2.3
CPE cpe:2.3:a:tenable:nessus:::::::: Remediation No remediation found in references.
opensuse leap	15.0 15.1 42.3
CPE cpe:2.3:o:opensuse:leap:15.0:::::::* cpe:2.3:o:opensuse:leap:15.1:::::::* cpe:2.3:o:opensuse:leap:42.3:::::::* Remediation No remediation found in references.
netapp cn1610 firmware	All versions
CPE cpe:2.3:o:netapp:cn1610_firmware:-:::::::* Remediation No remediation found in references.
netapp cn1610	All versions
CPE cpe:2.3:h:netapp:cn1610:-:::::::* Remediation No remediation found in references.
netapp a320 firmware	All versions
CPE cpe:2.3:o:netapp:a320_firmware:-:::::::* Remediation No remediation found in references.
netapp a320	All versions
CPE cpe:2.3:h:netapp:a320:-:::::::* Remediation No remediation found in references.
netapp c190 firmware	All versions
CPE cpe:2.3:o:netapp:c190_firmware:-:::::::* Remediation No remediation found in references.
netapp c190	All versions
CPE cpe:2.3:h:netapp:c190:-:::::::* Remediation No remediation found in references.
netapp a220 firmware	All versions
CPE cpe:2.3:o:netapp:a220_firmware:-:::::::* Remediation No remediation found in references.
netapp a220	All versions
CPE cpe:2.3:h:netapp:a220:-:::::::* Remediation No remediation found in references.
netapp fas2720 firmware	All versions
CPE cpe:2.3:o:netapp:fas2720_firmware:-:::::::* Remediation No remediation found in references.
netapp fas2720	All versions
CPE cpe:2.3:h:netapp:fas2720:-:::::::* Remediation No remediation found in references.
netapp fas2750 firmware	All versions
CPE cpe:2.3:o:netapp:fas2750_firmware:-:::::::* Remediation No remediation found in references.
netapp fas2750	All versions
CPE cpe:2.3:h:netapp:fas2750:-:::::::* Remediation No remediation found in references.
netapp a800 firmware	All versions
CPE cpe:2.3:o:netapp:a800_firmware:-:::::::* Remediation No remediation found in references.
netapp a800	All versions
CPE cpe:2.3:h:netapp:a800:-:::::::* Remediation No remediation found in references.
fedoraproject fedora	29 30 31
CPE cpe:2.3:o:fedoraproject:fedora:29:::::::* cpe:2.3:o:fedoraproject:fedora:30:::::::* cpe:2.3:o:fedoraproject:fedora:31:::::::* Remediation No remediation found in references.
mcafee agent	>= 5.6.0, <= 5.6.4
CPE cpe:2.3:a:mcafee:agent:::::::: Remediation No remediation found in references.
mcafee data exchange layer	>= 4.0.0, < 6.0.0
CPE cpe:2.3:a:mcafee:data_exchange_layer:::::::: Remediation No remediation found in references.
mcafee threat intelligence exchange server	>= 2.0.0, < 3.0.0
CPE cpe:2.3:a:mcafee:threat_intelligence_exchange_server:::::::: Remediation No remediation found in references.
mcafee web gateway	>= 7.0.0, < 9.0.0
CPE cpe:2.3:a:mcafee:web_gateway:::::::: Remediation No remediation found in references.
redhat jboss enterprise web server	5.0.0
CPE cpe:2.3:a:redhat:jboss_enterprise_web_server:5.0.0:::::::* Remediation No remediation found in references.
redhat enterprise linux	6.0 7.0 8.0
CPE cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux:7.0:::::::* cpe:2.3:o:redhat:enterprise_linux:8.0:::::::* Remediation No remediation found in references.
redhat virtualization	4.0
CPE cpe:2.3:a:redhat:virtualization:4.0:::::::* Remediation No remediation found in references.
redhat virtualization host	4.0
CPE cpe:2.3:a:redhat:virtualization_host:4.0:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::* Remediation No remediation found in references.
oracle api gateway	11.1.2.4.0
CPE cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:::::::* Remediation No remediation found in references.
oracle business intelligence	11.1.1.9.0 12.2.1.3.0 12.2.1.4.0
CPE cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0::::enterprise::: cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0::::enterprise::: cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0::::enterprise::: Remediation No remediation found in references.
oracle communications diameter signaling router	8.0.0 8.1 8.2 8.3 8.4
CPE cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:::::::* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:::::::* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:::::::* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:::::::* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:::::::* Remediation No remediation found in references.
oracle communications performance intelligence center	10.4.0.2
CPE cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.2:::::::* Remediation No remediation found in references.
oracle communications session border controller	7.4 8.0.0 8.1.0 8.2 8.3
CPE cpe:2.3:a:oracle:communications_session_border_controller:7.4:::::::* cpe:2.3:a:oracle:communications_session_border_controller:8.0.0:::::::* cpe:2.3:a:oracle:communications_session_border_controller:8.1.0:::::::* cpe:2.3:a:oracle:communications_session_border_controller:8.2:::::::* cpe:2.3:a:oracle:communications_session_border_controller:8.3:::::::* Remediation No remediation found in references.
oracle communications session router	7.4 8.0 8.1 8.2 8.3
CPE cpe:2.3:a:oracle:communications_session_router:7.4:::::::* cpe:2.3:a:oracle:communications_session_router:8.0:::::::* cpe:2.3:a:oracle:communications_session_router:8.1:::::::* cpe:2.3:a:oracle:communications_session_router:8.2:::::::* cpe:2.3:a:oracle:communications_session_router:8.3:::::::* Remediation No remediation found in references.
oracle communications unified session manager	7.3.5 8.2.5
CPE cpe:2.3:a:oracle:communications_unified_session_manager:7.3.5:::::::* cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:::::::* Remediation No remediation found in references.
oracle endeca server	7.7.0
CPE cpe:2.3:a:oracle:endeca_server:7.7.0:::::::* Remediation No remediation found in references.
oracle enterprise manager base platform	12.1.0.5.0 13.2.0.0.0 13.3.0.0.0
CPE cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:::::::* cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:::::::* cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:::::::* Remediation No remediation found in references.
oracle enterprise manager ops center	12.3.3 12.4.0
CPE cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:::::::* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:::::::* Remediation No remediation found in references.
oracle jd edwards enterpriseone tools	9.2
CPE cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:::::::* Remediation No remediation found in references.
oracle jd edwards world security	a9.3 a9.3.1 a9.4
CPE cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:::::::* cpe:2.3:a:oracle:jd_edwards_world_security:a9.3.1:::::::* cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:::::::* Remediation No remediation found in references.
oracle mysql	>= 5.6.0, <= 5.6.43 >= 5.7.0, <= 5.7.25 >= 8.0.0, <= 8.0.15
CPE cpe:2.3:a:oracle:mysql:::::::: Remediation No remediation found in references.
oracle mysql enterprise monitor	<= 4.0.8 >= 8.0.0, <= 8.0.14
CPE cpe:2.3:a:oracle:mysql_enterprise_monitor:::::::: Remediation No remediation found in references.
oracle mysql workbench	<= 8.0.16
CPE cpe:2.3:a:oracle:mysql_workbench:::::::: Remediation No remediation found in references.
oracle peoplesoft enterprise peopletools	8.55 8.56 8.57
CPE cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:::::::* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:::::::* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:::::::* Remediation No remediation found in references.
oracle secure global desktop	5.4
CPE cpe:2.3:a:oracle:secure_global_desktop:5.4:::::::* Remediation No remediation found in references.
oracle services tools bundle	19.2
CPE cpe:2.3:a:oracle:services_tools_bundle:19.2:::::::* Remediation No remediation found in references.
paloaltonetworks pan-os	>= 7.1.0, < 7.1.15 >= 8.0.0, < 8.0.20 >= 8.1.0, < 8.1.8 >= 9.0.0, < 9.0.2
CPE cpe:2.3:o:paloaltonetworks:pan-os:::::::: Remediation No remediation found in references.
nodejs node.js	>= 6.0.0, <= 6.8.1 >= 6.9.0, < 6.17.0 >= 8.0.0, <= 8.8.1 >= 8.9.0, < 8.15.1
CPE cpe:2.3:a:nodejs:node.js:::::-:::* cpe:2.3:a:nodejs:node.js:::::lts:::* Remediation No remediation found in references.

Change History

44 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Aug 19, 2022	Reanalysis	[email protected]
Mar 24, 2022	Modified Analysis	[email protected]
Jan 20, 2021	CVE Modified	[email protected]
Aug 24, 2020	CWE Remap	[email protected]
Jul 22, 2020	CVE Modified	[email protected]
Jan 15, 2020	CVE Modified	[email protected]
Nov 20, 2019	CVE Modified	[email protected]
Oct 16, 2019	CVE Modified	[email protected]
Oct 9, 2019	CVE Modified	[email protected]
Sep 26, 2019	CVE Modified	[email protected]
Sep 25, 2019	CVE Modified	[email protected]
Sep 21, 2019	CVE Modified	[email protected]
Aug 13, 2019	CVE Modified	[email protected]
Aug 12, 2019	CVE Modified	[email protected]
Aug 6, 2019	CVE Modified	[email protected]
Jul 23, 2019	CVE Modified	[email protected]
Jun 27, 2019	CVE Modified	[email protected]
May 22, 2019	CVE Modified	[email protected]
May 15, 2019	CVE Modified	[email protected]
May 15, 2019	CVE Modified	[email protected]
Apr 25, 2019	Modified Analysis	[email protected]
Apr 23, 2019	CVE Modified	[email protected]
Apr 23, 2019	CVE Modified	[email protected]
Apr 8, 2019	CVE Modified	[email protected]
Apr 2, 2019	CVE Modified	[email protected]
Mar 29, 2019	Modified Analysis	[email protected]
Mar 28, 2019	CVE Modified	[email protected]
Mar 27, 2019	CVE Modified	[email protected]
Mar 21, 2019	CVE Modified	[email protected]
Mar 18, 2019	Modified Analysis	[email protected]
Mar 14, 2019	CVE Modified	[email protected]
Mar 8, 2019	CVE Modified	[email protected]
Mar 4, 2019	Modified Analysis	[email protected]
Mar 4, 2019	CVE Modified	[email protected]
Mar 2, 2019	CVE Modified	[email protected]
Mar 1, 2019	Modified Analysis	[email protected]
Mar 1, 2019	CVE Modified	[email protected]
Feb 28, 2019	Reanalysis	[email protected]
Feb 28, 2019	Initial Analysis	[email protected]
Feb 28, 2019	CVE Modified	[email protected]

CVE-2019-1559 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation