{"id":"CVE-2020-1968","aliases":["DEBIAN-CVE-2020-1968","DLA-2378-1","EUVD-2020-12758","GHSA-mh8f-5gw2-5wgh","MGASA-2020-0465","SUSE-SU-2020:14491-1","SUSE-SU-2020:14511-1","SUSE-SU-2020:2634-1","UBUNTU-CVE-2020-1968","USN-4504-1","USN-7018-1"],"status":"published","title":"Raccoon attack","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04903,"percentile":0.92159,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203","CWE-326"],"published":"2020-09-09T00:00:00Z","modified":"2026-10-26T12:02:29Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.1.0c-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.1.0c-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.1.0c-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"openssl1.0","fixed_in":["1.0.2u-1~deb9u2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openssl","fixed_in":["0.9.8j-0.106.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openssl","fixed_in":["0.9.8j-0.106.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssl1","fixed_in":["1.0.1g-0.58.27.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.27+esm10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","fixed_in":["1.0.2g-1ubuntu4.fips.4.17.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","fixed_in":["1.0.2n-1ubuntu5.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0c-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0c-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0c-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2u-1~deb9u2"}]}],"versions":["1.0.2l-2","1.0.2l-2+deb9u1","1.0.2l-2+deb9u2","1.0.2l-2+deb9u3","1.0.2m-1","1.0.2m-2","1.0.2m-3","1.0.2n-1","1.0.2n-1+riscv64","1.0.2o-1","1.0.2o-1+riscv64","1.0.2q-1","1.0.2q-1~deb9u1","1.0.2q-2","1.0.2r-1~deb9u1","1.0.2s-1~deb9u1","1.0.2t-1~deb9u1","1.0.2u-1~deb9u1"]},{"source":"osv","ecosystem":"Mageia:7","package":"compat-openssl10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2u-1.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-0.106.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-0.106.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1g-0.58.27.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-106.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm10"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4","1.0.1f-1ubuntu2.27+esm5","1.0.1f-1ubuntu2.27+esm6","1.0.1f-1ubuntu2.27+esm7","1.0.1f-1ubuntu2.27+esm9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.17"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1","0~20160408.ffea0a2c-2ubuntu0.2+esm3","0~20160408.ffea0a2c-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.fips.4.17.1"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.9.1","1.0.2g-1ubuntu4.fips.4.13.1","1.0.2g-1ubuntu4.fips.4.15.1","1.0.2g-1ubuntu4.fips.4.16.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.2g-1ubuntu4.fips.4.6~ppa1","1.0.2g-1ubuntu4.fips.4.6~ppa2","1.0.2g-1ubuntu4.fips.4.6~ppa3","1.0.2g-1ubuntu4.fips.4.6","1.0.2g-1ubuntu4.fips.4.6.1","1.0.2g-1ubuntu4.fips.4.6.2","1.0.2g-1ubuntu4.fips.4.6.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.4"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2g-1ubuntu4.17"}]}],"versions":["1.0.2d-0ubuntu1","1.0.2d-0ubuntu2","1.0.2e-1ubuntu1","1.0.2f-2ubuntu1","1.0.2g-1ubuntu2","1.0.2g-1ubuntu3","1.0.2g-1ubuntu4","1.0.2g-1ubuntu4.1","1.0.2g-1ubuntu4.2","1.0.2g-1ubuntu4.4","1.0.2g-1ubuntu4.5","1.0.2g-1ubuntu4.6","1.0.2g-1ubuntu4.8","1.0.2g-1ubuntu4.9","1.0.2g-1ubuntu4.10","1.0.2g-1ubuntu4.11","1.0.2g-1ubuntu4.12","1.0.2g-1ubuntu4.13","1.0.2g-1ubuntu4.14","1.0.2g-1ubuntu4.15","1.0.2g-1ubuntu4.16"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssl1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2n-1ubuntu5.4"}]}],"versions":["1.0.2n-1ubuntu2","1.0.2n-1ubuntu3","1.0.2n-1ubuntu4","1.0.2n-1ubuntu5","1.0.2n-1ubuntu5.1","1.0.2n-1ubuntu5.2","1.0.2n-1ubuntu5.3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm10"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3","1.0.1f-1ubuntu2.27+esm4","1.0.1f-1ubuntu2.27+esm5","1.0.1f-1ubuntu2.27+esm6","1.0.1f-1ubuntu2.27+esm7","1.0.1f-1ubuntu2.27+esm9"],"bundled":6}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fujitsu","product":"m10-1_firmware"},{"vendor":"fujitsu","product":"m10-4_firmware"},{"vendor":"fujitsu","product":"m10-4s_firmware"},{"vendor":"fujitsu","product":"m12-1_firmware"},{"vendor":"fujitsu","product":"m12-2_firmware"},{"vendor":"fujitsu","product":"m12-2s_firmware"},{"vendor":"openssl","product":"openssl"},{"vendor":"oracle","product":"ethernet_switch_es1-24_firmware"},{"vendor":"oracle","product":"ethernet_switch_es2-64_firmware"},{"vendor":"oracle","product":"ethernet_switch_es2-72_firmware"},{"vendor":"oracle","product":"ethernet_switch_tor-72_firmware"},{"vendor":"oracle","product":"jd_edwards_world_security"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"}],"references":[{"url":"https://www.openssl.org/news/secadv/20200909.txt","tags":["x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://usn.ubuntu.com/4504-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200911-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202210-02","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1968"},{"url":"https://security.netapp.com/advisory/ntap-20200911-0004"},{"url":"https://usn.ubuntu.com/4504-1"},{"url":"https://github.com/advisories/GHSA-mh8f-5gw2-5wgh"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-1968","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0465.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27305","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4504-1","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20201208.txt","tags":["web"]},{"url":"https://www.debian.org/security/2020/dsa-4807","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4662-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014491-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1176331","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1968","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014511-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202634-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153785","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-1968","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1968","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7018-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-1547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-23840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-0727","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-1968","title":"Raccoon attack","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2020-09-09T13:50:12.423Z","modified":"2026-04-16T14:10:35.131Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:35:56.638833Z"}],"euvd":[{"id":"EUVD-2020-12758","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2020-09-09T13:50:12Z","modified":"2026-04-16T14:10:35Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T19:24:24.386229Z"}],"ghsa":[{"id":"GHSA-mh8f-5gw2-5wgh","title":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being...","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2022-05-24T17:27:38Z","modified":"2026-04-16T15:32:29Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-203","CWE-326"],"updated_at":"2026-11-02T15:07:31.233383Z"}],"nvd":[{"id":"CVE-2020-1968","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2020-09-09T14:15:12.507Z","modified":"2026-06-17T03:02:44.55Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:06:14.981587Z"}],"osv":[{"id":"CVE-2020-1968","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2020-09-09T14:15:12.507Z","modified":"2026-10-24T10:30:35.198744395Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-1968","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2020-09-09T14:15:12.507Z","modified":"2026-10-26T12:02:29.390742696Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-1968","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).","status":"published","published":"2020-09-09T00:00:00Z","modified":"2026-10-05T19:19:40.565083545Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"DLA-2378-1","title":"openssl1.0 - security update","status":"published","published":"2020-09-25T00:00:00Z","modified":"2026-03-09T01:21:13.144914Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0465","title":"Updated compat-openssl10 packages fix security vulnerabilities","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead\nto an attacker being able to compute the pre-master secret in connections\nwhich have used a Diffie-Hellman (DH) based ciphersuite. In such a case this\nwould result in the attacker being able to eavesdrop on all encrypted\ncommunications sent over that TLS connection. The attack can only be exploited\nif an implementation re-uses a DH secret across multiple TLS connections.\nNote that this issue only impacts DH ciphersuites and not ECDH ciphersuites.\n(CVE-2020-1968)\n\nThe X.509 GeneralName type is a generic type for representing different types\nof names. One of those name types is known as EDIPartyName.\nOpenSSL provides a function GENERAL_NAME_cmp which compares different\ninstances of a GENERAL_NAME to see if they are equal or not. This function\nbehaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME.\nA NULL pointer dereference and a crash may occur leading to a possible\ndenial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function\nfor two purposes:\n1) Comparing CRL distribution point names between an available CRL and a\nCRL distribution point embedded in an X509 certificate\n2) When verifying that a timestamp response token signer matches the\ntimestamp authority name (exposed via the API functions TS_RESP_verify_response\nand TS_RESP_verify_token)\nIf an attacker can control both items being compared then that attacker\ncould trigger a crash. For example if the attacker can trick a client or\nserver into checking a malicious certificate against a malicious CRL then\nthis may occur.\nNote that some applications automatically download CRLs based on a URL\nembedded in a certificate. This checking happens prior to the signatures on\nthe certificate and CRL being verified. OpenSSL's s_server, s_client and\nverify tools have support for the \"-crl_download\" option which implements\nautomatic CRL downloading and this attack has been demonstrated to work\nagainst those tools. Note that an unrelated bug means that affected versions\nof OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME.\nHowever it is possible to construct a malformed EDIPARTYNAME that OpenSSL's\nparser will accept and hence trigger this attack.\n(CVE-2020-1971)\n","status":"published","published":"2020-12-21T21:47:06Z","modified":"2026-04-16T04:44:05.068630339Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"SUSE-SU-2020:14491-1","title":"Security update for openssl","description":"This update for openssl fixes the following issues:\n\n- CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys \n  and never reuse them across multiple TLS connections (bsc#1176331).\t  \n","status":"published","published":"2020-09-15T09:19:49Z","modified":"2026-02-04T03:09:11.755937Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:14511-1","title":"Security update for openssl1","description":"This update for openssl1 fixes the following issues:\n\n- CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys \n  and never reuse them across multiple TLS connections (bsc#1176331).\t  \n","status":"published","published":"2020-10-05T15:29:58Z","modified":"2026-02-04T02:24:58.693113Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:2634-1","title":"Security update for compat-openssl098","description":"This update for compat-openssl098 fixes the following issues:\n\n- CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys \n  and never reuse them across multiple TLS connections (bsc#1176331).\n","status":"published","published":"2020-09-15T09:19:00Z","modified":"2025-05-02T04:08:56.675721Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4504-1","title":"openssl, openssl1.0 vulnerabilities","description":"Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovsky\ndiscovered that certain Diffie-Hellman ciphersuites in the TLS\nspecification and implemented by OpenSSL contained a flaw. A remote\nattacker could possibly use this issue to eavesdrop on encrypted\ncommunications. This was fixed in this update by removing the insecure\nciphersuites from OpenSSL. (CVE-2020-1968)\n\nCesar Pereida García, Sohaib ul Hassan, Nicola Tuveri, Iaroslav Gridin,\nAlejandro Cabrera Aldaya, and Billy Brumley discovered that OpenSSL\nincorrectly handled ECDSA signatures. An attacker could possibly use this\nissue to perform a timing side-channel attack and recover private ECDSA\nkeys. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-1547)\n\nGuido Vranken discovered that OpenSSL incorrectly performed the x86_64\nMontgomery squaring procedure. While unlikely, a remote attacker could\npossibly use this issue to recover private keys. This issue only affected\nUbuntu 18.04 LTS. (CVE-2019-1551)\n\nBernd Edlinger discovered that OpenSSL incorrectly handled certain\ndecryption functions. In certain scenarios, a remote attacker could\npossibly use this issue to perform a padding oracle attack and decrypt\ntraffic. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-1563)\n\n","status":"published","published":"2020-09-16T13:58:04Z","modified":"2026-04-27T15:48:48.461128707Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-7018-1","title":"openssl vulnerabilities","description":"Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovsky\ndiscovered that certain Diffie-Hellman ciphersuites in the TLS\nspecification and implemented by OpenSSL contained a flaw. A remote\nattacker could possibly use this issue to eavesdrop on encrypted\ncommunications. This was fixed in this update by removing the insecure\nciphersuites from OpenSSL. (CVE-2020-1968)\n\nPaul Kehrer discovered that OpenSSL incorrectly handled certain input\nlengths in EVP functions. A remote attacker could possibly use this issue\nto cause OpenSSL to crash, resulting in a denial of service.\n(CVE-2021-23840)\n\nElison Niven discovered that OpenSSL incorrectly handled the c_rehash\nscript. A local attacker could possibly use this issue to execute arbitrary\ncommands when c_rehash is run. (CVE-2022-1292)\n\nChancen and Daniel Fiala discovered that OpenSSL incorrectly handled the\nc_rehash script. A local attacker could possibly use this issue to execute\narbitrary commands when c_rehash is run. (CVE-2022-2068)\n\nIt was discovered that OpenSSL incorrectly handled excessively large\nDiffie-Hellman parameters. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2023-3446)\n\nBahaa Naamneh discovered that OpenSSL incorrectly handled certain malformed\nPKCS12 files. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2024-0727)\n","status":"published","published":"2024-09-18T00:38:46Z","modified":"2026-06-29T13:51:16.693258405Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}