Skip to content
Fencer Intel
medium 4.7

CVE-2019-1547 json

ECDSA remote timing attack

published 7y ago modified 3mo ago also EUVD-2019-10104 , GHSA-q2qv-648h-wcqp , JLSEC-2026-214

cvss
4.7
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.1%
EPSS 1.1% chance of exploitation in 30 days, percentile 66%
public exploits
0
none known

Summary

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).

Patch / fix

  • julia OpenSSL_jll 1.1.1+2
  • openssl Debian 14, Debian 13, Debian 12 1.1.1d-1

debian advisories DEBIAN-CVE-2019-1547

  • openssl Ubuntu 16.04 LTS 1.0.2g-1ubuntu4.16
  • openssl Ubuntu 18.04 LTS 1.1.1-1ubuntu2.1~18.04.6
  • openssl1.0 Ubuntu 18.04 LTS 1.0.2n-1ubuntu5.4
  • openssl Ubuntu Pro 14.04 LTS 1.0.1f-1ubuntu2.27+esm1

ubuntu advisories UBUNTU-CVE-2019-1547

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • openssl RHEL 8 1:1.1.1c-15.el8
  • openssl-libs RHEL 8 1:1.1.1c-15.el8
  • openssl-perl RHEL 8 1:1.1.1c-15.el8
  • jbcs-httpd24-apr jboss core services 1 1.6.3-86.jbcs.el6
  • jbcs-httpd24-apr jboss core services 1 1.6.3-86.jbcs.el7
  • jbcs-httpd24-httpd jboss core services 1 2.4.37-52.jbcs.el6
  • jbcs-httpd24-httpd jboss core services 1 2.4.37-52.jbcs.el7
  • jbcs-httpd24-brotli jboss core services 1 1.0.6-21.jbcs.el6

red hat advisories RHSA-2020:1840RHSA-2020:1337

  • openssl-1_1 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +4 more 1.1.1d-2.20.1
  • openssl-1_0_0 SLE Module for Legacy 15 SP1, SLE Module for Legacy 15, Enterprise Storage 6 1.0.2p-3.22.1
  • compat-openssl098 SLES for SAP 12 SP4, SLES for SAP 12 SP3, SLES for SAP 12 SP2 +3 more 0.9.8j-106.15.1
  • openssl-1_0_0 SLES for SAP 12 SP4, SLES 12 SP4, SLED 12 SP4 +1 more 1.0.2p-3.11.1
  • openssl SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES 12 SP3-LTSS +9 more 1.0.2j-60.55.1
  • openssl-1_1 SLE Module for Basesystem 15 1.1.0i-4.24.1
  • openssl SLES 11 SP4-LTSS, SLE Point of Sale 11 SP3 0.9.8j-0.106.25.1
  • openssl-1_1 SLE Module for Basesystem 15 SP1 1.1.0i-14.3.1

suse advisories SUSE-SU-2020:0099-1SUSE-SU-2019:2561-1SUSE-SU-2019:2558-1SUSE-SU-2019:2504-1SUSE-SU-2019:2413-1SUSE-SU-2019:2410-1

  • openssl-1_0_0 openSUSE Tumbleweed 1.0.2u-6.2
  • openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2
  • openssl-1_0_0 openSUSE Leap 15.1 1.0.2p-lp151.5.10.1
  • openssl-1_0_0 openSUSE Leap 15.0 1.0.2p-lp150.2.19.1
  • openssl-1_1 openSUSE Leap 15.0 1.1.0i-lp150.3.25.1
  • openssl-1_1 openSUSE Leap 15.1 1.1.0i-lp151.8.3.1

opensuse advisories openSUSE-SU-2024:11126-1openSUSE-SU-2024:11127-1openSUSE-SU-2019:2269-1openSUSE-SU-2019:2268-1openSUSE-SU-2019:2189-1openSUSE-SU-2019:2158-1

  • openssl Alpine 3.10, Alpine 3.9 1.1.1d-r0
  • openssl Alpine 3.24, Alpine 3.23, Alpine 3.22 +11 more 1.1.1d-r1
  • openssl Alpine 3.8, Alpine 3.7 1.0.2t-r0
  • openssl3 Alpine 3.16, Alpine 3.15 1.1.1d-r1
  • openssl1.1-compat Alpine 3.18, Alpine 3.17 1.1.1d-r1

alpine advisories ALPINE-CVE-2019-1547

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Is CVE-2019-1547 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-1547 updated cvss 5.5

openssl: side-channel weak encryption vulnerability

  • Red Hat Enterprise Linux 6 openssl, openssl-perl
    affected: no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 7 openssl, openssl-libs, openssl-perl Red Hat Enterprise Linux 8 compat-openssl10
    affected: no fix planned “Will not fix”
  • Red Hat JBoss Enterprise Application Platform 5 openssl Red Hat JBoss Enterprise Application Platform 6 openssl Red Hat JBoss Enterprise Web Server 2 openssl Red Hat JBoss Web Server 3 openssl
    affected: no fix planned “Out of support scope”
  • Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP2
    fixed: vendor fix RHSA-2020:1336
  • Red Hat Enterprise Linux BaseOS (v. 8) openssl 1.1.1c-15.el8, openssl-libs 1.1.1c-15.el8, openssl-perl 1.1.1c-15.el8
    fixed: vendor fix RHSA-2020:1840
  • Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-apr 1.6.3-86.jbcs.el6, jbcs-httpd24-brotli 1.0.6-21.jbcs.el6, jbcs-httpd24-httpd 2.4.37-52.jbcs.el6, jbcs-httpd24-mod_ssl 2.4.37-52.jbcs.el6, jbcs-httpd24-openssl 1.1.1c-16.jbcs.el6, jbcs-httpd24-mod_ldap 2.4.37-52.jbcs.el6, +9 more Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr 1.6.3-86.jbcs.el7, jbcs-httpd24-brotli 1.0.6-21.jbcs.el7, jbcs-httpd24-httpd 2.4.37-52.jbcs.el7, jbcs-httpd24-mod_ssl 2.4.37-52.jbcs.el7, jbcs-httpd24-openssl 1.1.1c-16.jbcs.el7, jbcs-httpd24-mod_ldap 2.4.37-52.jbcs.el7, +9 more
    fixed: vendor fix RHSA-2020:1337
  • Red Hat Enterprise Linux 5 openssl Red Hat Enterprise Linux 7 openssl098e Red Hat Enterprise Linux 8 mingw-openssl, mingw32-openssl, mingw64-openssl Red Hat JBoss Web Server 5 openssl
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-21-336-06 updated cvss 4.7

Hitachi Energy APM Edge

  • Hitachi Energy APM Edge 3.0, 2.0, 1.0
    affected: vendor fix, mitigation “Physically protect process control systems from direct access by unauthorized personnel.” search.abb.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2y ago

Exploit prediction

1.13% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N
OSV 3.1 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected packages

ecosystem package affected fixed in
julia OpenSSL_jll
<1.1.1+2
1.1.1+2

Affected products

  • OpenSSL OpenSSL

Classification

Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.