{"id":"CVE-2019-1559","details":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","modified":"2026-07-17T20:58:06.691580721Z","published":"2019-02-27T23:29:00.277Z","related":["SUSE-FU-2022:0445-1","SUSE-SU-2019:0572-1","SUSE-SU-2019:0600-1","SUSE-SU-2019:0658-1","SUSE-SU-2019:0803-1","SUSE-SU-2019:0818-1","SUSE-SU-2019:1362-1","SUSE-SU-2019:14091-1","SUSE-SU-2019:14092-1","SUSE-SU-2019:1553-1","SUSE-SU-2019:1608-1","openSUSE-SU-2019:1105-1","openSUSE-SU-2019:1432-1","openSUSE-SU-2024:11126-1"],"database_specific":{"unresolved_ranges":[{"source":"CPE_RANGE","vendor_product":"f5:big-ip_access_policy_manager","cpes":["cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}]},{"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_advanced_firewall_manager","cpes":["cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*"]},{"vendor_product":"f5:big-ip_analytics","cpes":["cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_application_acceleration_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_application_security_manager"},{"source":"CPE_RANGE","vendor_product":"f5:big-ip_domain_name_system","cpes":["cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}]},{"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_edge_gateway","cpes":["cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_fraud_protection_service"},{"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_global_traffic_manager","cpes":["cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_link_controller","cpes":["cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_local_traffic_manager"},{"source":"CPE_RANGE","vendor_product":"f5:big-ip_policy_enforcement_manager","cpes":["cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}]},{"cpes":["cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"},{"introduced":"13.0.0"},{"last_affected":"13.1.3"},{"introduced":"14.0.0"},{"last_affected":"14.1.2"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_webaccelerator"},{"cpes":["cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0.0"},{"last_affected":"6.1.0"},{"introduced":"7.0.0"},{"last_affected":"7.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-iq_centralized_management"},{"cpes":["cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:traffix_signaling_delivery_controller"},{"cpes":["cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.6.0"},{"last_affected":"5.6.4"}],"source":"CPE_RANGE","vendor_product":"mcafee:agent"},{"cpes":["cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0.0"},{"fixed":"6.0.0"}],"source":"CPE_RANGE","vendor_product":"mcafee:data_exchange_layer"},{"vendor_product":"mcafee:threat_intelligence_exchange_server","cpes":["cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0.0"},{"fixed":"3.0.0"}],"source":"CPE_RANGE"},{"vendor_product":"mcafee:web_gateway","cpes":["cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0.0"},{"fixed":"9.0.0"}],"source":"CPE_RANGE"},{"cpes":["cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"],"extracted_events":[{"introduced":"7.3"},{"introduced":"9.5"}],"source":"CPE_RANGE","vendor_product":"netapp:active_iq_unified_manager"},{"extracted_events":[{"introduced":"9.0.0"},{"last_affected":"9.0.4"}],"source":"CPE_RANGE","vendor_product":"netapp:storagegrid","cpes":["cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*"]},{"vendor_product":"nodejs:node.js","cpes":["cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"6.0.0"},{"last_affected":"6.8.1"},{"introduced":"6.9.0"},{"fixed":"6.17.0"},{"introduced":"8.0.0"},{"last_affected":"8.8.1"},{"introduced":"8.9.0"},{"fixed":"8.15.1"}],"source":"CPE_RANGE"},{"extracted_events":[{"last_affected":"4.0.8"},{"introduced":"8.0.0"},{"last_affected":"8.0.14"}],"source":"CPE_RANGE","vendor_product":"oracle:mysql_enterprise_monitor","cpes":["cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.0.16"}],"source":"CPE_RANGE","vendor_product":"oracle:mysql_workbench"},{"extracted_events":[{"introduced":"7.1.0"},{"fixed":"7.1.15"},{"introduced":"8.0.0"},{"fixed":"8.0.20"},{"introduced":"8.1.0"},{"fixed":"8.1.8"},{"introduced":"9.0.0"},{"fixed":"9.0.2"}],"source":"CPE_RANGE","vendor_product":"paloaltonetworks:pan-os","cpes":["cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*"]},{"vendor_product":"tenable:nessus","cpes":["cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.2.3"}],"source":"CPE_RANGE"},{"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"18.10"},{"last_affected":"18.10"}]},{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"f5:traffix_signaling_delivery_controller","cpes":["cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.4.0"},{"last_affected":"4.4.0"}]},{"extracted_events":[{"introduced":"29"},{"last_affected":"29"},{"introduced":"30"},{"last_affected":"30"},{"introduced":"31"},{"last_affected":"31"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"]},{"extracted_events":[{"introduced":"15.0"},{"last_affected":"15.0"},{"introduced":"15.1"},{"last_affected":"15.1"},{"introduced":"42.3"},{"last_affected":"42.3"}],"source":"CPE_STRING","vendor_product":"opensuse:leap","cpes":["cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.4.0"},{"last_affected":"11.1.2.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:api_gateway"},{"extracted_events":[{"introduced":"11.1.1.9.0"},{"last_affected":"11.1.1.9.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:business_intelligence","cpes":["cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*"]},{"source":"CPE_STRING","vendor_product":"oracle:communications_diameter_signaling_router","cpes":["cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0.0"},{"last_affected":"8.0.0"},{"introduced":"8.1"},{"last_affected":"8.1"},{"introduced":"8.2"},{"last_affected":"8.2"},{"introduced":"8.3"},{"last_affected":"8.3"},{"introduced":"8.4"},{"last_affected":"8.4"}]},{"extracted_events":[{"introduced":"10.4.0.2"},{"last_affected":"10.4.0.2"}],"source":"CPE_STRING","vendor_product":"oracle:communications_performance_intelligence_center","cpes":["cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.2:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:communications_session_border_controller:7.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.1.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_border_controller:8.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"8.0.0"},{"last_affected":"8.0.0"},{"introduced":"8.1.0"},{"last_affected":"8.1.0"},{"introduced":"8.2"},{"last_affected":"8.2"},{"introduced":"8.3"},{"last_affected":"8.3"}],"source":"CPE_STRING","vendor_product":"oracle:communications_session_border_controller"},{"source":"CPE_STRING","vendor_product":"oracle:communications_session_router","cpes":["cpe:2.3:a:oracle:communications_session_router:7.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_session_router:8.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.4"},{"last_affected":"7.4"},{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"8.1"},{"last_affected":"8.1"},{"introduced":"8.2"},{"last_affected":"8.2"},{"introduced":"8.3"},{"last_affected":"8.3"}]},{"extracted_events":[{"introduced":"7.3.5"},{"last_affected":"7.3.5"},{"introduced":"8.2.5"},{"last_affected":"8.2.5"}],"source":"CPE_STRING","vendor_product":"oracle:communications_unified_session_manager","cpes":["cpe:2.3:a:oracle:communications_unified_session_manager:7.3.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:endeca_server:7.7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.7.0"},{"last_affected":"7.7.0"}],"source":"CPE_STRING","vendor_product":"oracle:endeca_server"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.1.0.5.0"},{"last_affected":"12.1.0.5.0"},{"introduced":"13.2.0.0.0"},{"last_affected":"13.2.0.0.0"},{"introduced":"13.3.0.0.0"},{"last_affected":"13.3.0.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_base_platform"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.3.3"},{"last_affected":"12.3.3"},{"introduced":"12.4.0"},{"last_affected":"12.4.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_ops_center"},{"vendor_product":"oracle:jd_edwards_enterpriseone_tools","cpes":["cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2"},{"last_affected":"9.2"}],"source":"CPE_STRING"},{"extracted_events":[{"introduced":"a9.3"},{"last_affected":"a9.3"},{"introduced":"a9.3.1"},{"last_affected":"a9.3.1"},{"introduced":"a9.4"},{"last_affected":"a9.4"}],"source":"CPE_STRING","vendor_product":"oracle:jd_edwards_world_security","cpes":["cpe:2.3:a:oracle:jd_edwards_world_security:a9.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.55"},{"last_affected":"8.55"},{"introduced":"8.56"},{"last_affected":"8.56"},{"introduced":"8.57"},{"last_affected":"8.57"}],"source":"CPE_STRING","vendor_product":"oracle:peoplesoft_enterprise_peopletools"},{"cpes":["cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.4"},{"last_affected":"5.4"}],"source":"CPE_STRING","vendor_product":"oracle:secure_global_desktop"},{"cpes":["cpe:2.3:a:oracle:services_tools_bundle:19.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"19.2"},{"last_affected":"19.2"}],"source":"CPE_STRING","vendor_product":"oracle:services_tools_bundle"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_desktop"},{"vendor_product":"redhat:enterprise_linux_server","cpes":["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation"},{"cpes":["cpe:2.3:a:redhat:jboss_enterprise_web_server:5.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.0.0"}],"source":"CPE_STRING","vendor_product":"redhat:jboss_enterprise_web_server"},{"cpes":["cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0"},{"last_affected":"4.0"}],"source":"CPE_STRING","vendor_product":"redhat:virtualization"},{"source":"CPE_STRING","vendor_product":"redhat:virtualization_host","cpes":["cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"4.0"},{"last_affected":"4.0"}]}]},"references":[{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/"},{"type":"WEB","url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS"},{"type":"WEB","url":"https://usn.ubuntu.com/4376-2/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/107174"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2304"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2437"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2439"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2471"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3929"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3931"},{"type":"ADVISORY","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10282"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201903-10"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190301-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190423-0002/"},{"type":"ADVISORY","url":"https://support.f5.com/csp/article/K18549143"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3899-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4400"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20190226.txt"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2019-03"},{"type":"FIX","url":"https://security.netapp.com/advisory/ntap-20190301-0001/"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"},{"type":"FIX","url":"https://www.tenable.com/security/tns-2019-02"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mysql/mysql-server","events":[{"introduced":"0"},{"last_affected":"67b51d50c833a8744fc600e6200175c3d8404d98"},{"last_affected":"3701bd36bec259fe494c75c9b30c57b01e598297"},{"introduced":"270fd3411e3d671a73ed9725940a30080f59ce6d"},{"last_affected":"ca94b993454c86be248fbe180db94647488114e9"}],"database_specific":{"cpe":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.6.0"},{"last_affected":"5.6.43"},{"introduced":"5.7.0"},{"last_affected":"5.7.25"},{"introduced":"8.0.0"},{"last_affected":"8.0.15"}],"source":"CPE_RANGE"}}],"versions":["mysql-8.0.15","mysql-8.0.14","mysql-5.6.43","mysql-5.7.25","mysql-5.6.40","mysql-5.1.4","mysql-4.0.4","mysql-4.0.2","mysql-3.23.36","mysql-3.23.33","mysql-3.23.32","mysql-3.23.31","mysql-3.23.30-gamma","mysql-3.23.28-gamma","mysql-3.23.22-beta"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1559.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"e818b74be2170fbe957a07b0da4401c2b694b3b8"}],"database_specific":{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.2"},{"fixed":"1.0.2r"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1559.json","vanir_signatures_modified":"2026-07-11T18:14:59Z","vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["251633914150035957322733061977107206211","338514574181828579838011565939158652696","76638288692106140328510055542557597351","142922657400765574308962710386922248045","71649992455794854055653842592139575350","65527166711110472566013424527579064967","253196866009476977787139000804413898733","172177136897997206866313011107384691461"]},"id":"CVE-2019-1559-e051451f","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8","target":{"file":"crypto/opensslv.h"}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}