https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T21:58:02.012487+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-1559 CVE-2019-1559 — 0-byte record padding oracle 2026-10-05T21:58:02.051465+00:00

Affected: OpenSSL

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

 https://vulnerability.circl.lu/vuln/usn-3899-1 USN-3899-1 — openssl, openssl1.0 vulnerability 2026-10-05T21:58:02.051589+00:00

Affected: Ubuntu:16.04:LTS: openssl, Ubuntu:18.04:LTS: openssl1.0

Juraj Somorovsky, Robert Merget, and Nimrod Aviram discovered that certain applications incorrectly used OpenSSL and could be exposed to a padding oracle attack. A remote attacker could possibly use this issue to decrypt data.