4.3

CVE-2020-1968: Raccoon attack

Modified
AliasesSUSE-SU-2020:14491-1SUSE-SU-2020:14511-1UBUNTU-CVE-2020-1968
Published 09-09-2020Last modified 16-04-2026

Vulnerability summary

CVE-2020-1968 is a medium (CVSS 4.3) Observable Discrepancy vulnerability in canonical ubuntu_linux. EPSS estimates a 4.90% chance of exploitation in the next 30 days, higher than 92.1% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 3.7, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
4.3/10
010
Medium · v2.0 (NVD)
EPSS score
4.90%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 3
MGASA-2020-0465SUSE-SU-2020:2634-1USN-4504-1USN-7018-1

Timeline

  1. 09-09-2020
    PublishedVulnerability first disclosed.
  2. 16-04-2026
    Last modifiedVulnerability information updated.

Description

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

4.90%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.90% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Fujitsu6 products
Oracle6 products
Debian3 products
  • openssl< 1.1.0c-1
  • openssl1.0< 1.0.2u-1~deb9u2
  • debian_linuxEOL9.0
Suse3 products
  • openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY< 1.0.1g-0.58.27.2
  • openssl&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 0.9.8j-0.106.34.1
  • openssl&distro=SUSE Linux Enterprise Server 11 SP4-LTSS< 0.9.8j-0.106.34.1
Ubuntu3 products
  • edk2All versions (No fix recorded)
  • openssl< 1.0.1f-1ubuntu2.27+esm10 | < 1.0.2g-1ubuntu4.17 | < 1.0.2g-1ubuntu4.fips.4.17.1 | All versions (No fix recorded)
  • openssl1.0< 1.0.2n-1ubuntu5.4
Canonical1 product
Chainguard1 product
  • eco-dotnet-libssl-1.0-ld-so-confAll versions (No fix recorded)
Openssl1 product
  • opensslFixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v) | ≥ 1.0.2, ≤ 1.0.2v

8 vendors · 24 products

References

19 links
Show all 19 references