IM
IronMonkey Threat Research

CVE-2020-1968 MEDIUM

Published: 2020-09-09 | Last Modified: 2026-04-16 | Status: Modified

Description

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).

Additional Descriptions (1)

El ataque Raccoon explota un fallo en la especificación TLS que puede conllevar a que un atacante sea capaz de calcular el secreto pre-master en conexiones que han usado un conjunto de cifrado basado en Diffie-Hellman (DH). En tal caso, esto haría que el atacante pudiera espiar todas las comunicaciones cifradas enviadas por medio de esa conexión TLS. El ataque solo puede ser explotado si una implementación reutiliza un secreto de DH en varias conexiones TLS. Tome en cuenta que este problema solo afecta a los conjuntos de cifrado DH y no a los conjuntos de cifrado ECDH. Este problema afecta a OpenSSL versión 1.0.2, que no es compatible y ya no recibe actualizaciones públicas. OpenSSL versión 1.1.1 no es vulnerable a este problema. Corregido en OpenSSL versión 1.0.2w (Afectadas versiones 1.0.2-1.0.2v).

CVSS Metrics

Base Score: 3.7 (LOW)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.2

Impact Score: 1.4

Base Score: 4.3 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-203
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-203

Affected Products

Vendor Product Version Update Type
openssl openssl * <built-in method update of dict object at 0x72a9b0907d00> Application
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x72a9b0c67f00> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x72a9b0b38900> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x72a9cc523f40> Operating System
oracle jd_edwards_world_security a9.4 <built-in method update of dict object at 0x72a9b0907d80> Application
oracle peoplesoft_enterprise_peopletools 8.56 <built-in method update of dict object at 0x72a9b0905540> Application
oracle peoplesoft_enterprise_peopletools 8.57 <built-in method update of dict object at 0x72a9b0c658c0> Application
oracle peoplesoft_enterprise_peopletools 8.58 <built-in method update of dict object at 0x72a9b0b394c0> Application
oracle ethernet_switch_es2-64_firmware 2.0.0.14 <built-in method update of dict object at 0x72a9b0c64f80> Operating System
oracle ethernet_switch_es2-72_firmware 2.0.0.14 <built-in method update of dict object at 0x72a9b0907380> Operating System
fujitsu m10-1_firmware * <built-in method update of dict object at 0x72a9b0b3b340> Operating System
fujitsu m10-4_firmware * <built-in method update of dict object at 0x72a9b0c667c0> Operating System
fujitsu m10-4s_firmware * <built-in method update of dict object at 0x72a9b09065c0> Operating System
fujitsu m12-1_firmware * <built-in method update of dict object at 0x72a9b0b38e80> Operating System
fujitsu m12-2_firmware * <built-in method update of dict object at 0x72a9b0b39580> Operating System
fujitsu m12-2s_firmware * <built-in method update of dict object at 0x72a9b0c677c0> Operating System
fujitsu m10-1_firmware * <built-in method update of dict object at 0x72a9b0b6b300> Operating System
fujitsu m10-4_firmware * <built-in method update of dict object at 0x72a9b09058c0> Operating System
fujitsu m10-4s_firmware * <built-in method update of dict object at 0x72a9b0b382c0> Operating System
fujitsu m12-1_firmware * <built-in method update of dict object at 0x72a9cc523540> Operating System
fujitsu m12-2_firmware * <built-in method update of dict object at 0x72a9cd06e440> Operating System
fujitsu m12-2s_firmware * <built-in method update of dict object at 0x72a9b0c64c40> Operating System
oracle ethernet_switch_es1-24_firmware 1.3.1 <built-in method update of dict object at 0x72a9b0b38b80> Operating System
oracle ethernet_switch_tor-72_firmware 1.2.2 <built-in method update of dict object at 0x72a9b0c65e40> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:oracle:ethernet_switch_es2-64_firmware:2.0.0.14:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:oracle:ethernet_switch_es2-64:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:oracle:ethernet_switch_es2-72_firmware:2.0.0.14:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:oracle:ethernet_switch_es2-72:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:oracle:ethernet_switch_es1-24_firmware:1.3.1:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:oracle:ethernet_switch_es1-24:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:oracle:ethernet_switch_tor-72_firmware:1.2.2:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:oracle:ethernet_switch_tor-72:-:*:*:*:*:*:*:*

References

Notification
Message here