CVE-2020-1968
Severity
3.7LOW
EPSS
1.3%
top 20.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 9
Latest updateSep 18
Description
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites a…
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4
Affected Packages17 packages
Also affects: Debian Linux 9.0, Ubuntu Linux 16.04, 18.04
Patches
🔴Vulnerability Details
5GHSA▶
GHSA-mh8f-5gw2-5wgh: The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections w↗2022-05-24
OSV▶
CVE-2020-1968: The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections w↗2020-09-09
📋Vendor Advisories
7💬Community
3Bugzilla▶
CVE-2020-1968 openssl11: openssl: Information exposure when DH secret are reused across multiple TLS connections [epel-7]↗2020-09-09
Bugzilla▶
CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections↗2020-09-09
Bugzilla▶
CVE-2020-1968 openssl: Information exposure when DH secret are reused across multiple TLS connections [fedora-all]↗2020-09-09