{"id":"CVE-2020-1968","details":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","modified":"2026-11-11T10:45:08.200507485Z","published":"2020-09-09T14:15:12.507Z","related":["SUSE-SU-2020:14491-1","SUSE-SU-2020:14511-1","SUSE-SU-2020:2634-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"xcp2400"},{"fixed":"xcp3100"}],"source":"CPE_RANGE"}],"vendor_product":"fujitsu:m10-1_firmware"},{"cpes":["cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"xcp2400"},{"fixed":"xcp3100"}]}],"vendor_product":"fujitsu:m10-4_firmware"},{"cpes":["cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"xcp2400"},{"fixed":"xcp3100"}]}],"vendor_product":"fujitsu:m10-4s_firmware"},{"cpes":["cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"xcp2400"},{"fixed":"xcp3100"}],"source":"CPE_RANGE"}],"vendor_product":"fujitsu:m12-1_firmware"},{"vendor_product":"fujitsu:m12-2_firmware","cpes":["cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"xcp2400"},{"fixed":"xcp3100"}]}]},{"vendor_product":"fujitsu:m12-2s_firmware","cpes":["cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"xcp2400"},{"fixed":"xcp3100"}],"source":"CPE_RANGE"}]},{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"introduced":"1.0.2"},{"last_affected":"1.0.2v"}]}],"vendor_product":"openssl:openssl"},{"extracted_events":[{"range":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"}],"source":"CPE_STRING"}],"vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"]},{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"9.0"},{"last_affected":"9.0"}]}],"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:ethernet_switch_es1-24_firmware","cpes":["cpe:2.3:o:oracle:ethernet_switch_es1-24_firmware:1.3.1:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"1.3.1"},{"last_affected":"1.3.1"}],"source":"CPE_STRING"}]},{"extracted_events":[{"range":[{"introduced":"2.0.0.14"},{"last_affected":"2.0.0.14"}],"source":"CPE_STRING"}],"vendor_product":"oracle:ethernet_switch_es2-64_firmware","cpes":["cpe:2.3:o:oracle:ethernet_switch_es2-64_firmware:2.0.0.14:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:o:oracle:ethernet_switch_es2-72_firmware:2.0.0.14:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"2.0.0.14"},{"last_affected":"2.0.0.14"}],"source":"CPE_STRING"}],"vendor_product":"oracle:ethernet_switch_es2-72_firmware"},{"cpes":["cpe:2.3:o:oracle:ethernet_switch_tor-72_firmware:1.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"1.2.2"},{"last_affected":"1.2.2"}]}],"vendor_product":"oracle:ethernet_switch_tor-72_firmware"},{"cpes":["cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"a9.4"},{"last_affected":"a9.4"}],"source":"CPE_STRING"}],"vendor_product":"oracle:jd_edwards_world_security"},{"cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"8.56"},{"last_affected":"8.56"},{"introduced":"8.57"},{"last_affected":"8.57"},{"introduced":"8.58"},{"last_affected":"8.58"}],"source":"CPE_STRING"}],"vendor_product":"oracle:peoplesoft_enterprise_peopletools"}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202210-02"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200911-0004/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4504-1/"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20200909.txt"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"FIX","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/alsyundawy/openssl-1.0.2","events":[{"introduced":"c46078156d49453ba69badc9addb1e2dcd1c71f5"},{"last_affected":"c46078156d49453ba69badc9addb1e2dcd1c71f5"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"1.0.2"},{"last_affected":"1.0.2v"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"}]}}],"versions":["1.0.2zs-u20260929-rev1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1968.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"last_affected":"e818b74be2170fbe957a07b0da4401c2b694b3b8"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2"},{"last_affected":"1.0.2v"}],"source":"CPE_RANGE"}]}}],"versions":["OpenSSL_1_0_2u"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1968.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}