{"id":"CVE-2019-1559","details":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","modified":"2026-04-16T04:40:17.226166840Z","published":"2019-02-27T23:29:00.277Z","related":["CGA-gh94-xch9-qggh","SUSE-FU-2022:0445-1","SUSE-SU-2019:0572-1","SUSE-SU-2019:0600-1","SUSE-SU-2019:0658-1","SUSE-SU-2019:0803-1","SUSE-SU-2019:0818-1","SUSE-SU-2019:1362-1","SUSE-SU-2019:14091-1","SUSE-SU-2019:14092-1","SUSE-SU-2019:1553-1","SUSE-SU-2019:1608-1","openSUSE-SU-2019:1105-1","openSUSE-SU-2019:1432-1","openSUSE-SU-2024:11126-1"],"references":[{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/"},{"type":"WEB","url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS"},{"type":"WEB","url":"https://usn.ubuntu.com/4376-2/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2304"},{"type":"ADVISORY","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10282"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190301-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190423-0002/"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2019-03"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3899-1/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2437"},{"type":"ADVISORY","url":"https://support.f5.com/csp/article/K18549143"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4400"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3931"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/107174"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2439"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2471"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201903-10"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20190226.txt"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3929"},{"type":"FIX","url":"https://security.netapp.com/advisory/ntap-20190301-0001/"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"type":"FIX","url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"},{"type":"FIX","url":"https://www.tenable.com/security/tns-2019-02"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mysql/mysql-server","events":[{"introduced":"0"},{"last_affected":"f2f2b941543768ddf4639d1496abad4c4cac168f"},{"introduced":"0"},{"last_affected":"2f280d1bf1163dd9e9d42ceefa2fed8626bd79ab"},{"introduced":"0"},{"last_affected":"12b7b1a82ada0708142e4c195afbc8656c2ac7b9"},{"introduced":"0"},{"last_affected":"67b51d50c833a8744fc600e6200175c3d8404d98"},{"introduced":"0"},{"last_affected":"3701bd36bec259fe494c75c9b30c57b01e598297"},{"introduced":"270fd3411e3d671a73ed9725940a30080f59ce6d"},{"last_affected":"ca94b993454c86be248fbe180db94647488114e9"},{"introduced":"0"},{"last_affected":"9ecf9645ebab531ce5aa29514b6b9457968f9946"},{"introduced":"270fd3411e3d671a73ed9725940a30080f59ce6d"},{"last_affected":"8e797a5d6eb3a87f16498edcb7261a75897babae"},{"introduced":"0"},{"last_affected":"124c7ab1d6f914637521fd4463a993aa73403513"},{"introduced":"270fd3411e3d671a73ed9725940a30080f59ce6d"},{"fixed":"7d10c82196c8e45554f27c00681474a9fb86d137"}],"database_specific":{"versions":[{"introduced":"5.6.0"},{"last_affected":"5.6.4"},{"introduced":"0"},{"last_affected":"7.3.5"},{"introduced":"0"},{"last_affected":"a9.3.1"},{"introduced":"5.6.0"},{"last_affected":"5.6.43"},{"introduced":"5.7.0"},{"last_affected":"5.7.25"},{"introduced":"8.0.0"},{"last_affected":"8.0.15"},{"introduced":"0"},{"last_affected":"4.0.8"},{"introduced":"8.0.0"},{"last_affected":"8.0.14"},{"introduced":"0"},{"last_affected":"8.0.16"},{"introduced":"8.0.0"},{"fixed":"8.0.20"}]}},{"type":"GIT","repo":"https://github.com/nodejs/node","events":[{"introduced":"b65a11e072cf751d8c2a9699451ef80022d4ffbc"},{"fixed":"b65a11e072cf751d8c2a9699451ef80022d4ffbc"},{"introduced":"0"},{"last_affected":"bdf069ba0f6ee63056628af20d95cd82ca5ea736"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"fa9990f3fb5b06fe94e294925246d2c136deb2c2"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"last_affected":"7f8213006780ac1953de5f57ce304f890e1eeb02"},{"introduced":"362fe010fe8f6feb0030e1e02c689b501e11ddb7"},{"last_affected":"0a3a967d54cd7e3ea509914cbf14e0fea04dd586"},{"introduced":"384e6c2dfe968002800bc3d3224a57aa19ffdfee"},{"last_affected":"02fd81a89f490002f032d06a48b30f4caa957afe"},{"introduced":"0"},{"last_affected":"83ca8fa313d81353d99690dc2620bdbf8e3d5e88"},{"introduced":"0"},{"last_affected":"d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d"},{"introduced":"0"},{"last_affected":"2291e079f22e6df1f7683a05d17364b2ab3bfdab"},{"introduced":"f9f837885343a2a3f5ba2b8c510eaac395c8c865"},{"fixed":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"introduced":"7c89c4c7acdaa2035ec42195ade689419209c2fd"},{"fixed":"6faf17cb45e27cb6feeff4a0da1513ea99a68b58"},{"introduced":"362fe010fe8f6feb0030e1e02c689b501e11ddb7"},{"fixed":"fa9990f3fb5b06fe94e294925246d2c136deb2c2"},{"introduced":"0"},{"last_affected":"384e6c2dfe968002800bc3d3224a57aa19ffdfee"},{"introduced":"0"},{"last_affected":"f9f837885343a2a3f5ba2b8c510eaac395c8c865"},{"introduced":"0"},{"last_affected":"f9f837885343a2a3f5ba2b8c510eaac395c8c865"},{"introduced":"0"},{"last_affected":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"introduced":"0"},{"last_affected":"362fe010fe8f6feb0030e1e02c689b501e11ddb7"},{"introduced":"0"},{"last_affected":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"introduced":"0"},{"last_affected":"362fe010fe8f6feb0030e1e02c689b501e11ddb7"},{"introduced":"0"},{"last_affected":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"introduced":"0"},{"last_affected":"362fe010fe8f6feb0030e1e02c689b501e11ddb7"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"fb88fa19f1268d9627035eea0a402d3802a2d26a"},{"introduced":"0"},{"last_affected":"56a0577b2ebf111346779cf790a1f54e0e464078"},{"introduced":"0"},{"last_affected":"4760abcdd95070e06257b5408c2f72dcc787cfa9"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"fb88fa19f1268d9627035eea0a402d3802a2d26a"},{"introduced":"0"},{"last_affected":"4760abcdd95070e06257b5408c2f72dcc787cfa9"},{"introduced":"0"},{"last_affected":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"introduced":"0"},{"last_affected":"f6fc46e03674ab1896792b7363ecac0665b5e0c5"},{"introduced":"0"},{"last_affected":"eb66efd6052801e2f10360c51787569da0185808"},{"introduced":"0"},{"last_affected":"fb88fa19f1268d9627035eea0a402d3802a2d26a"},{"introduced":"0"},{"last_affected":"a7ffa8d3fde90e16e1e7f6130fc1665b7d541939"},{"introduced":"0"},{"last_affected":"64219741218aa87e259cf8257596073b8e747f0a"},{"introduced":"0"},{"last_affected":"50ec9bf015b9d77795e04b88b50341c244974956"},{"introduced":"0"},{"last_affected":"08941e9f1b3f1e8214e0a23d02b19bb07de8b951"},{"introduced":"0"},{"last_affected":"7aefa404df93553ce24dc3e40f23dc72ea1852d3"},{"introduced":"0"},{"last_affected":"af591d494070a978d23fdb6c7c46ff52060b61b1"},{"introduced":"0"},{"last_affected":"8a4d7ac6b50ff425b22a0a0a2ad7ec0ae9f31587"},{"introduced":"ce3e3c5fe15479475c068482c48eb9cbf1ac9df5"},{"last_affected":"c6a397bce63fc026421e1515b98eec9b8b5a8468"},{"introduced":"6b1c40be84fbe5ea404f25e4e340a0c1fe67a60a"},{"fixed":"e6a25300148c32872d6701dfa25c1210797beb4b"},{"introduced":"0d8021e5a4cf0a6aa3a700a361f6d42c2894f2ba"},{"last_affected":"dc6bbb44daec5584a0fbd37f0916baeff3202dba"},{"introduced":"f76ce0a75641991bfc235775a4747c978e0e281b"},{"fixed":"783e1e2065f96c74fd8ab8503c14f28f628c4ec0"}],"database_specific":{"versions":[{"introduced":"1.0.2"},{"fixed":"1.0.2r"},{"introduced":"0"},{"last_affected":"18.10"},{"introduced":"0"},{"last_affected":"8.0"},{"introduced":"0"},{"last_affected":"9.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.1.0"},{"introduced":"6.0.0"},{"last_affected":"6.1.0"},{"introduced":"7.0.0"},{"last_affected":"7.1.0"},{"introduced":"5.0.0"},{"last_affected":"5.1.0"},{"introduced":"0"},{"last_affected":"4.4.0"},{"introduced":"0"},{"last_affected":"15.0"},{"introduced":"0"},{"last_affected":"15.1"},{"introduced":"4.0.0"},{"fixed":"6.0.0"},{"introduced":"2.0.0"},{"fixed":"3.0.0"},{"introduced":"7.0.0"},{"fixed":"9.0.0"},{"introduced":"0"},{"last_affected":"5.0.0"},{"introduced":"0"},{"last_affected":"4.0"},{"introduced":"0"},{"last_affected":"4.0"},{"introduced":"0"},{"last_affected":"6.0"},{"introduced":"0"},{"last_affected":"7.0"},{"introduced":"0"},{"last_affected":"6.0"},{"introduced":"0"},{"last_affected":"7.0"},{"introduced":"0"},{"last_affected":"6.0"},{"introduced":"0"},{"last_affected":"7.0"},{"introduced":"0"},{"last_affected":"8.0.0"},{"introduced":"0"},{"last_affected":"8.1"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.3"},{"introduced":"0"},{"last_affected":"8.4"},{"introduced":"0"},{"last_affected":"7.4"},{"introduced":"0"},{"last_affected":"8.0.0"},{"introduced":"0"},{"last_affected":"8.1.0"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.3"},{"introduced":"0"},{"last_affected":"7.4"},{"introduced":"0"},{"last_affected":"8.0"},{"introduced":"0"},{"last_affected":"8.1"},{"introduced":"0"},{"last_affected":"8.2"},{"introduced":"0"},{"last_affected":"8.3"},{"introduced":"0"},{"last_affected":"7.7.0"},{"introduced":"0"},{"last_affected":"12.4.0"},{"introduced":"0"},{"last_affected":"9.2"},{"introduced":"0"},{"last_affected":"a9.3"},{"introduced":"0"},{"last_affected":"a9.4"},{"introduced":"0"},{"last_affected":"5.4"},{"introduced":"0"},{"last_affected":"19.2"},{"introduced":"6.0.0"},{"last_affected":"6.8.1"},{"introduced":"6.9.0"},{"fixed":"6.17.0"},{"introduced":"8.0.0"},{"last_affected":"8.8.1"},{"introduced":"8.9.0"},{"fixed":"8.15.1"}]}}],"versions":["mysql-3.23.22-beta","mysql-3.23.28-gamma","mysql-3.23.30-gamma","mysql-3.23.31","mysql-3.23.32","mysql-3.23.33","mysql-3.23.36","mysql-4.0.2","mysql-4.0.4","mysql-4.0.6","mysql-4.0.7","mysql-4.0.8","mysql-5.1.4","mysql-5.6.4","mysql-5.6.40","mysql-5.6.43","mysql-5.7.25","mysql-8.0.14","mysql-8.0.15","mysql-8.0.16","mysql-9.0.0-release","mysql-9.3.1","mysql-cluster-7.3.5","mysql-cluster-8.0.16","v0.0.1","v0.0.2","v0.0.3","v0.0.4","v0.0.6","v0.1.0","v0.1.1","v0.1.10","v0.1.100","v0.1.101","v0.1.102","v0.1.103","v0.1.104","v0.1.11","v0.1.12","v0.1.13","v0.1.14","v0.1.15","v0.1.16","v0.1.17","v0.1.18","v0.1.19","v0.1.2","v0.1.20","v0.1.21","v0.1.22","v0.1.23","v0.1.24","v0.1.25","v0.1.26","v0.1.27","v0.1.28","v0.1.29","v0.1.3","v0.1.30","v0.1.31","v0.1.32","v0.1.33","v0.1.4","v0.1.5","v0.1.6","v0.1.7","v0.1.8","v0.1.9","v0.1.92","v0.1.93","v0.1.94","v0.1.95","v0.1.96","v0.1.97","v0.1.98","v0.1.99","v0.2.0","v0.3.0","v0.3.1","v0.3.2","v0.3.4","v0.3.5","v0.3.6","v0.3.7","v0.3.8","v0.4.0","v0.5.0","v0.5.1","v0.5.10","v0.5.2","v0.5.3","v0.5.4","v0.5.5","v0.5.5-rc1","v0.5.6","v0.5.7","v0.5.8","v0.5.9","v0.6.0","v0.6.1","v0.7.0","v0.7.2","v0.7.3","v1.0.1","v1.0.1-release","v12.0.0","v12.1.0","v12.2.0","v12.3.0","v12.3.1","v12.4.0","v15.0.0","v15.0.1","v15.1.0","v18.0.0","v18.1.0","v18.10.0","v18.2.0","v18.3.0","v18.4.0","v18.5.0","v18.6.0","v18.7.0","v18.8.0","v18.9.0","v18.9.1","v19.0.0","v19.0.1","v19.1.0","v19.2.0","v2.0.0","v2.0.1","v2.0.2","v2.1.0","v2.2.0","v2.2.1","v2.3.0","v2.3.1","v2.3.2","v2.3.3","v2.3.4","v2.4.0","v2.5.0","v3.0.0","v4.0.0","v4.1.0","v4.1.1","v4.1.2","v4.2.0","v4.2.1","v4.2.2","v4.2.3","v4.2.4","v4.2.5","v4.2.6","v4.3.0","v4.3.1","v4.3.2","v4.4.0","v5.0.0","v5.1.0","v5.1.1","v5.2.0","v5.3.0","v5.4.0","v6.0.0","v6.1.0","v6.10.0","v6.10.1","v6.10.2","v6.10.3","v6.11.0","v6.11.1","v6.11.2","v6.11.3","v6.11.4","v6.11.5","v6.12.0","v6.12.1","v6.12.2","v6.12.3","v6.13.0","v6.13.1","v6.14.0","v6.14.1","v6.14.2","v6.14.3","v6.14.4","v6.15.0","v6.15.1","v6.16.0","v6.2.0","v6.2.1","v6.2.2","v6.3.0","v6.3.1","v6.4.0","v6.5.0","v6.6.0","v6.7.0","v6.8.0","v6.8.1","v6.9.0","v6.9.1","v6.9.2","v6.9.3","v6.9.4","v6.9.5","v7.0.0","v7.1.0","v7.2.0","v7.2.1","v7.3.0","v7.4.0","v7.5.0","v7.6.0","v7.7.0","v8.0.0","v8.1.0","v8.1.1","v8.1.2","v8.1.3","v8.1.4","v8.10.0","v8.11.0","v8.11.1","v8.11.2","v8.11.3","v8.11.4","v8.12.0","v8.13.0","v8.14.0","v8.14.1","v8.15.0","v8.2.0","v8.2.1","v8.3.0","v8.4.0","v8.5.0","v8.6.0","v8.7.0","v8.8.0","v8.8.1","v8.9.0","v8.9.1","v8.9.2","v8.9.3","v8.9.4","v9.0.0","v9.1.0","v9.2.0","v9.2.1","v9.3.0","v9.4.0"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"16.04"}]},{"events":[{"introduced":"0"},{"last_affected":"18.04"}]},{"events":[{"introduced":"7.3"}]},{"events":[{"introduced":"9.5"}]},{"events":[{"introduced":"9.0.0"},{"last_affected":"9.0.4"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"12.1.0"},{"last_affected":"12.1.5"}]},{"events":[{"introduced":"13.0.0"},{"last_affected":"13.1.3"}]},{"events":[{"introduced":"14.0.0"},{"last_affected":"14.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"8.2.3"}]},{"events":[{"introduced":"0"},{"last_affected":"42.3"}]},{"events":[{"introduced":"0"},{"last_affected":"29"}]},{"events":[{"introduced":"0"},{"last_affected":"30"}]},{"events":[{"introduced":"0"},{"last_affected":"31"}]},{"events":[{"introduced":"0"},{"last_affected":"11.1.2.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"11.1.1.9.0"}]},{"events":[{"introduced":"0"},{"last_affected":"12.2.1.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"12.2.1.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"10.4.0.2"}]},{"events":[{"introduced":"0"},{"last_affected":"8.2.5"}]},{"events":[{"introduced":"0"},{"last_affected":"12.1.0.5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"13.2.0.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"13.3.0.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"12.3.3"}]},{"events":[{"introduced":"0"},{"last_affected":"8.55"}]},{"events":[{"introduced":"0"},{"last_affected":"8.56"}]},{"events":[{"introduced":"0"},{"last_affected":"8.57"}]},{"events":[{"introduced":"7.1.0"},{"fixed":"7.1.15"}]},{"events":[{"introduced":"8.1.0"},{"fixed":"8.1.8"}]},{"events":[{"introduced":"9.0.0"},{"fixed":"9.0.2"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1559.json","vanir_signatures_modified":"2026-04-11T14:11:00Z","vanir_signatures":[{"digest":{"line_hashes":["317463022452382766021103977305274585179","231023415934437405040826552604315029303","297740067960712497696382412249502119229","309425770541891912532229026717192392036","284148148647439509389511598979234415422","116378823324225689461236126012161469315","86824927962339967726030080493727111830","229418578243886234607155219959991524149","248333722744294557902251110539727458724","60562948043869069039720139670193814094","234065302816130076253002738647915957633","284004652744631390210136567077888520262","160922535157528631778173976280695262599","31363143091404555847052523631550609500","309255939664318821618380824832978289908","50551599195409746706267459404639193933","170240436352108084277830328958887278124","279197034075409124961633015511866447613","332791052601321667762795215187482398841"],"threshold":0.9},"source":"https://github.com/mysql/mysql-server/commit/7d10c82196c8e45554f27c00681474a9fb86d137","signature_type":"Line","target":{"file":"sql/auth/sql_security_ctx.cc"},"signature_version":"v1","id":"CVE-2019-1559-627d45fc","deprecated":false},{"digest":{"length":1080,"function_hash":"66171467169832509301814870837451245409"},"source":"https://github.com/mysql/mysql-server/commit/7d10c82196c8e45554f27c00681474a9fb86d137","signature_type":"Function","target":{"function":"Security_context::checkout_access_maps","file":"sql/auth/sql_security_ctx.cc"},"signature_version":"v1","id":"CVE-2019-1559-e648c373","deprecated":false}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}