CVE-2020-1967Suited to automated attack · CISA

Segmentation fault in SSL_check_chain

CVSS score

7.5

EPSS probability

%53.3

Risk score

4.0

Published

6 y ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2020-1967 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2020-1967 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

ID	VENDOR	PRODUCT	ACTION
1	openssl	openssl	View
2	openssl	openssl	View
3	debian	debian linux	View
4	debian	debian linux	View
5	freebsd	freebsd	View
6	fedoraproject	fedora	View
7	fedoraproject	fedora	View
8	fedoraproject	fedora	View
9	oracle	application server	View
10	oracle	enterprise manager base platform	View
11	oracle	enterprise manager for storage management	View
12	oracle	enterprise manager for storage management	View
13	oracle	enterprise manager ops center	View
14	oracle	http server	View
15	oracle	jd edwards world security	View
16	oracle	mysql	View
17	oracle	mysql	View
18	oracle	mysql	View
19	oracle	mysql connectors	View
20	oracle	mysql enterprise monitor	View
21	oracle	mysql enterprise monitor	View
22	oracle	mysql workbench	View
23	oracle	peoplesoft enterprise peopletools	View
24	oracle	peoplesoft enterprise peopletools	View
25	oracle	peoplesoft enterprise peopletools	View
26	oracle	peoplesoft enterprise peopletools	View
27	netapp	active iq unified manager	View
28	netapp	active iq unified manager	View
29	netapp	e-series performance analyzer	View
30	netapp	oncommand insight	View
31	netapp	oncommand workflow automation	View
32	netapp	smi-s provider	View
33	netapp	snapcenter	View
34	netapp	steelstore cloud integrated storage	View
35	broadcom	fabric operating system	View
36	opensuse	leap	View
37	opensuse	leap	View
38	jdedwards	enterpriseone	View
39	tenable	log correlation engine	View

Total affected vendors: 10|Products: 39

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCORE	VERSION	SEVERITY	VECTOR	SOURCE
7.5	CVSS V31	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	NVD
5.0	CVSS V2	—	AV:N/AC:L/Au:N/C:N/I:N/A:P	NVD

Patch and Remediation Guide