p PatchFirst

CVE-2019-1549

CVE-2019-1549 · Fork Protection

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c).

CVSS 5.3 · Media · EPSS 6,2% · Corrección disponible

Publicación
Actualización

Pila tecnológica: system · network

Productos y versiones afectados

  • openssl

    Versiones
    • Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c): Afectada

    Sin corrección publicada

  • openssl Debian:12

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1.1.1d-1

    Actualiza a 1.1.1d-1

  • openssl Debian:13

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1.1.1d-1

    Actualiza a 1.1.1d-1

  • openssl Debian:14

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1.1.1d-1

    Actualiza a 1.1.1d-1

  • openssl Ubuntu:18.04:LTS

    Versiones
    • 1.0.2g-1ubuntu13
    • 1.0.2g-1ubuntu14
    • 1.0.2n-1ubuntu1
    • 1.1.0g-2ubuntu1
    • 1.1.0g-2ubuntu2
    • 1.1.0g-2ubuntu3
    • 1.1.0g-2ubuntu4
    • 1.1.0g-2ubuntu4.1
    • 1.1.0g-2ubuntu4.3
    • 1.1.1-1ubuntu2.1~18.04.1
    • 1.1.1-1ubuntu2.1~18.04.2
    • 1.1.1-1ubuntu2.1~18.04.3
    • 1.1.1-1ubuntu2.1~18.04.4
    • 1.1.1-1ubuntu2.1~18.04.5
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1.1.1-1ubuntu2.1~18.04.6

    Actualiza a 1.1.1-1ubuntu2.1~18.04.6

Fuentes originales

Comprueba tu servidor →