CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

CVE details

CVE-2019-1551

There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).

Score
5.3 medium
Published
2019-12-06
Links
NVD · cve.org

Affected ports (2)

PortPackageVersionStatusMaintainer
security/linux-c7-openssl-devellinux-c7-openssl-devel1.0.2k_2unaddressedemulation@FreeBSD.org
security/openssl-unsafeopenssl-unsafe1.0.2.20170706unaddressedbrnrd@FreeBSD.org

VuXML

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>linux-c7-openssl-devel</name>
	<range><lt>FIXME</lt></range>
      </package>
      <package>
	<name>openssl-unsafe</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>There is an overflow bug in the x64_64 Montgomery squaring procedure
	used in exponentiation with 512-bit moduli. No EC algorithms are
	affected. Analysis suggests that attacks against 2-prime RSA1024,
	3-prime RSA1536, and DSA1024 as a result of this defect would be very
	difficult to perform and are not believed likely. Attacks against
	DH512 are considered just feasible. However, for an attack the target
	would have to re-use the DH512 private key, which is not recommended
	anyway. Also applications directly using the low level API BN_mod_exp
	may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e
	(Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected
	1.0.2-1.0.2t).</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2019-1551</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2019-1551</url>
    </references>
    <dates>
      <discovery>2019-12-06</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>