Description
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d), Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t) | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 1.1.1e-1 | — |
| Debian 13 | openssl | 1.1.1e-1 | — |
| Debian 12 | openssl | 1.1.1e-1 | — |
| Debian 10 | openssl | 1.1.1d-0+deb10u5 | DSA-4855-1 |
| Debian 9 | openssl | 1.1.0l-1~deb9u5 | DLA-2952-1 |
| Debian 9 | openssl1.0 | 1.0.2u-1~deb9u1 | DSA-4594-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu1 | — |
| Ubuntu 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.6 | USN-4376-1 |
| Ubuntu 18.04 LTS | openssl1.0 | 1.0.2n-1ubuntu5.4 | USN-4504-1 |
| Ubuntu 16.04 LTS | openssl | 1.0.2g-1ubuntu4.16 | USN-4504-1, USN-4376-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | openssl +3 | 1:1.1.1g-11.el8 | RHSA-2020:4514 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss Core Services 1 | jbcs-httpd24-apr +1 | 1.6.3-104.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-apr-util +8 | 1.6.1-75.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-brotli +1 | 1.0.6-38.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-curl +2 | 7.64.1-44.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-httpd +6 | 2.4.37-64.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-jansson +1 | 2.11-53.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_cluster-native | 1.3.14-11.Final_redhat_2.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_http2 | 1.15.7-11.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_jk +2 | 1.2.48-10.redhat_1.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_md | 1:2.0.8-30.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_security | 2.9.2-57.GA.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-mod_ssl +1 | 1:2.4.37-64.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-nghttp2 +1 | 1.39.2-34.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-openssl +4 | 1:1.1.1c-32.jbcs.el6 | RHSA-2020:4384 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-openssl-chil | 1.0.0-1.jbcs.el7 | RHSA-2020:4384 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | openssl-1_0_0 | 1.0.2p-3.25.1 | SUSE-SU-2020:0064-1 |
| SLES 15 SP1 | openssl-1_1 | 1.1.0i-14.6.1 | SUSE-SU-2020:0069-1 |
| SLES 15 | openssl-1_0_0 | 1.0.2p-3.25.1 | SUSE-SU-2020:0064-1 |
| SLES 15 | openssl-1_1 | 1.1.0i-4.27.1 | SUSE-SU-2020:0002-1 |
| SLES 12 SP5 | openssl-1_0_0 | 1.0.2p-3.14.1 | SUSE-SU-2020:0028-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.20.1 | SUSE-SU-2020:0099-1 |
| SLES 12 SP4 | openssl-1_0_0 | 1.0.2p-3.14.1 | SUSE-SU-2020:0028-1 |
| SLES 12 SP4 | openssl-1_1 | 1.1.1d-2.20.1 | SUSE-SU-2020:0099-1 |
| SLES 12 SP3 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SLES for SAP 12 SP5 | openssl-1_0_0 | 1.0.2p-3.14.1 | SUSE-SU-2020:0028-1 |
| SLES for SAP 12 SP5 | openssl-1_1 | 1.1.1d-2.20.1 | SUSE-SU-2020:0099-1 |
| SLES for SAP 12 SP4 | openssl-1_0_0 | 1.0.2p-3.14.1 | SUSE-SU-2020:0028-1 |
| SLES for SAP 12 SP4 | openssl-1_1 | 1.1.1d-2.20.1 | SUSE-SU-2020:0099-1 |
| SLES for SAP 12 SP3 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SLES for SAP 12 SP2 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SUSE OpenStack Cloud Crowbar 8 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SUSE OpenStack Cloud 8 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SUSE OpenStack Cloud 7 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SUSE HPE Helion OpenStack 8 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
| SUSE Enterprise Storage 6 | openssl-1_0_0 | 1.0.2p-3.25.1 | SUSE-SU-2020:0064-1 |
| SUSE Enterprise Storage 5 | openssl | 1.0.2j-60.60.1 | SUSE-SU-2020:0474-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_0_0 | 1.0.2u-6.2 | openSUSE-SU-2024:11126-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
| openSUSE Leap 15.1 | openssl-1_1 | 1.1.0i-lp151.8.6.1 | openSUSE-SU-2020:0062-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 1.1.1d-r3 | — |
| Alpine v3.23 | openssl | 1.1.1d-r3 | — |
| Alpine v3.22 | openssl | 1.1.1d-r3 | — |
| Alpine v3.21 | openssl | 1.1.1d-r3 | — |
| Alpine v3.20 | openssl | 1.1.1d-r3 | — |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openssl | 1.1.1d-r3 | — |
| Alpine v3.18 | openssl +1 | 1.1.1d-r3 | — |
| Alpine v3.17 | openssl +1 | 1.1.1d-r3 | — |
| Alpine v3.16 | openssl +1 | 1.1.1d-r3 | — |
| Alpine v3.15 | openssl +1 | 1.1.1d-r3 | — |
| Alpine v3.14 | openssl | 1.1.1d-r3 | — |
| Alpine v3.13 | openssl | 1.1.1d-r3 | — |
| Alpine v3.12 | openssl | 1.1.1d-r3 | — |
| Alpine v3.11 | openssl | 1.1.1d-r3 | — |
| Alpine v3.10 | openssl | 1.1.1d-r2 | — |
| Alpine v3.9 | openssl | 1.1.1d-r2 | — |
| Alpine v3.8 | openssl | 1.0.2u-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-19.amzn2.0.7 | ALAS2-2021-1687 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | openssl +3 | 1:1.1.1g-11.el8 | ELSA-2020-4514 |
Advisories 19
- RHSA-2020:4384 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP5 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2020:4514 Red Hat Security Advisory: openssl security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Sep 21, 2026
- USN-4504-1 openssl, openssl1.0 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-4376-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-4855-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4594-1 openssl1.0 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2952-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2020:0002-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0064-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0028-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0474-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0069-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0099-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11126-1 libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0062-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-1761 OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 20, 2025
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ALAS2-2021-1687 Low: openssl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 15, 2021
- ELSA-2020-4514 Low: openssl security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 10, 2020
References
- 20191225 [slackware-security] openssl (SSA:2019-354-01) mailing-list
- DSA-4594 vendor-advisory
- 20191229 [SECURITY] [DSA 4594-1] openssl1.0 security update mailing-list
- openSUSE-SU-2020:0062 vendor-advisory
- GLSA-202004-10 vendor-advisory
- FEDORA-2020-fcc91a28e8 vendor-advisory
- FEDORA-2020-da2d1ef2d7 vendor-advisory
- FEDORA-2020-d7b29838f6 vendor-advisory
- USN-4376-1 vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.tenable.com/security/tns-2019-09
- https://www.openssl.org/news/secadv/20191206.txt
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98
- https://security.netapp.com/advisory/ntap-20191210-0001/
- http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html
- https://www.tenable.com/security/tns-2020-03
- USN-4504-1 vendor-advisory
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.tenable.com/security/tns-2020-11
- DSA-4855 vendor-advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.tenable.com/security/tns-2021-10
- [debian-lts-announce] 20220317 [SECURITY] [DLA 2952-1] openssl security update mailing-list