4.3

CVE-2019-1563: Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey

Modified
AliasesALPINE-CVE-2019-1563SUSE-SU-2019:14249-1UBUNTU-CVE-2019-1563
Published 10-09-2019Last modified 08-10-2026

Vulnerability summary

CVE-2019-1563 is a medium (CVSS 4.3) Observable Discrepancy vulnerability in openssl. EPSS estimates a 3.84% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 3.7, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
4.3/10
010
Medium · v2.0 (NVD)
EPSS score
3.84%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 26 · Related 20
DLA-1932-1DSA-4539-1DSA-4540-1MGASA-2019-0354OPENSUSE-SU-2019:2158-1OPENSUSE-SU-2019:2189-1

Timeline

  1. 10-09-2019
    PublishedVulnerability first disclosed.
  2. 08-10-2026
    Last modifiedVulnerability information updated.

Description

In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

3.84%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.84% on 05-10-2026

05-10-202604-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu4 products
  • edk2All versions (No fix recorded)
  • nodejsAll versions (No fix recorded)
  • openssl< 1.0.1f-1ubuntu2.27+esm1 | < 1.0.2g-1ubuntu4.16 | < 1.0.2g-1ubuntu4.fips.4.16.1 | All versions (No fix recorded) | < 1.1.1-1ubuntu2.1~18.04.6 | < 1.1.1-1ubuntu2.fips.2.1~18.04.6.1
  • openssl1.0< 1.0.2n-1ubuntu5.4
Alpine3 products
  • openssl≥ 1.0.2, < 1.1.1d-r0 | ≥ 1.0.2, < 1.1.1d-r1 | ≥ 1.0.2, < 1.0.2t-r0
  • openssl1.1-compat< 1.1.1d-r1
  • openssl3< 1.1.1d-r1
Suse2 products
  • openssl&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 0.9.8j-0.106.28.1
  • openssl&distro=SUSE Linux Enterprise Server 11 SP4-LTSS< 0.9.8j-0.106.28.1
Debian1 product
  • openssl< 1.1.1d-1
Openssl1 product
  • opensslFixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c) | Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k) | Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s) | ≥ 1.0.2, ≤ 1.0.2s | ≥ 1.1.0, ≤ 1.1.0k | ≥ 1.1.1, ≤ 1.1.1c

5 vendors · 11 products

References

40 links
Show all 40 references