CVE-2019-1559

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-203

Affected software

VendorProductVersions
OpenSSLOpenSSLFixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q)

References

Timeline

Published
Feb 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-155907.5An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where privCVE-2019-155916.5An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reportCVE-2019-155924.3GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associatCVE-2019-155936.5GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attCVE-2019-155944.3GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request eCVE-2019-155958.8A privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on the local machine to run arbitrary commandsCVE-2019-155967.5A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within tCVE-2019-155979.8A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.CVE-2019-155989.8A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the cCVE-2019-155999.8A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the CVE-2019-156007.5A Path traversal exists in http_server which allows an attacker to read arbitrary system files.CVE-2019-156026.1The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (XSS) vulnerability in