CVE-2019-9506

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

2.69% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 85.5% of scored records. A rank, not a probability.

NVD base score

8.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-08-14 16:27Z7 YR AGO

Last updated

2024-09-16 19:14Z2 YR AGO

Reserved

2019-03-01

Assigning CNA

certcc

Record state

PUBLISHED

Severity

High (CVSS 7.6)

CNA CVSS vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Weaknesses

• CWE-310
• CWE-327Use of a Broken or Risky Cryptographic AlgorithmClass

Data version

5.1

Document digest

8a4b4d8b513d044cd900090200734305168668655ff846960cd9ff7fbd6789ed

• www.kb.cert.orgVU#918987https://www.kb.cert.org/vuls/id/918987/third-party-advisoryx_refsource_CERT-VN
• www.cs.ox.ac.ukhttp://www.cs.ox.ac.uk/publications/publication12404-abstract.htmlx_refsource_MISC
• www.usenix.orghttps://www.usenix.org/conference/usenixsecurity19/presentation/antoniolix_refsource_MISC
• www.bluetooth.comhttps://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/x_refsource_CONFIRM
• seclists.org20190816 APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3http://seclists.org/fulldisclosure/2019/Aug/14mailing-listx_refsource_FULLDISC
• seclists.org20190816 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierrahttp://seclists.org/fulldisclosure/2019/Aug/11mailing-listx_refsource_FULLDISC
• seclists.org20190816 APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4http://seclists.org/fulldisclosure/2019/Aug/13mailing-listx_refsource_FULLDISC
• seclists.org20190816 APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4http://seclists.org/fulldisclosure/2019/Aug/15mailing-listx_refsource_FULLDISC
• www.huawei.comhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-enx_refsource_CONFIRM
• usn.ubuntu.comUSN-4115-1https://usn.ubuntu.com/4115-1/vendor-advisoryx_refsource_UBUNTU
• usn.ubuntu.comUSN-4118-1https://usn.ubuntu.com/4118-1/vendor-advisoryx_refsource_UBUNTU
• lists.debian.org[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security updatehttps://lists.debian.org/debian-lts-announce/2019/09/msg00014.htmlmailing-listx_refsource_MLIST
• lists.debian.org[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security updatehttps://lists.debian.org/debian-lts-announce/2019/09/msg00015.htmlmailing-listx_refsource_MLIST
• lists.debian.org[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security updatehttps://lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlmailing-listx_refsource_MLIST
• usn.ubuntu.comUSN-4147-1https://usn.ubuntu.com/4147-1/vendor-advisoryx_refsource_UBUNTU
• access.redhat.comRHSA-2019:2975https://access.redhat.com/errata/RHSA-2019:2975vendor-advisoryx_refsource_REDHAT
• lists.opensuse.orgopenSUSE-SU-2019:2307http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.htmlvendor-advisoryx_refsource_SUSE
• lists.opensuse.orgopenSUSE-SU-2019:2308http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.htmlvendor-advisoryx_refsource_SUSE
• access.redhat.comRHSA-2019:3076https://access.redhat.com/errata/RHSA-2019:3076vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3055https://access.redhat.com/errata/RHSA-2019:3055vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3089https://access.redhat.com/errata/RHSA-2019:3089vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3187https://access.redhat.com/errata/RHSA-2019:3187vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3165https://access.redhat.com/errata/RHSA-2019:3165vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3217https://access.redhat.com/errata/RHSA-2019:3217vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3220https://access.redhat.com/errata/RHSA-2019:3220vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3231https://access.redhat.com/errata/RHSA-2019:3231vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3218https://access.redhat.com/errata/RHSA-2019:3218vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3309https://access.redhat.com/errata/RHSA-2019:3309vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3517https://access.redhat.com/errata/RHSA-2019:3517vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2020:0204https://access.redhat.com/errata/RHSA-2020:0204vendor-advisoryx_refsource_REDHAT