IM
IronMonkey Threat Research

CVE-2022-2097 MEDIUM

Published: 2022-07-05 | Last Modified: 2024-11-21 | Status: Modified

Description

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).

Additional Descriptions (1)

El modo AES OCB para plataformas x86 de 32 bits que utilizan la implementación optimizada de ensamblaje AES-NI no cifrará la totalidad de los datos en algunas circunstancias. Esto podría revelar dieciséis bytes de datos que ya existían en la memoria y que no estaban escritos. En el caso especial del cifrado "in situ", se revelarían dieciséis bytes del texto sin formato. Dado que OpenSSL no es compatible con conjuntos de cifrado basados ??en OCB para TLS y DTLS, ambos no están afectados. Corregido en OpenSSL versión 3.0.5 (Afectado 3.0.0-3.0.4). Corregido en OpenSSL 1.1.1q (Afectado 1.1.1-1.1.1p)

CVSS Metrics

Base Score: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 1.4

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-327

Affected Products

Vendor Product Version Update Type
openssl openssl * <built-in method update of dict object at 0x7fd2dbc19e40> Application
openssl openssl * <built-in method update of dict object at 0x7fd37033d9c0> Application
fedoraproject fedora 35 <built-in method update of dict object at 0x7fd3423db640> Operating System
fedoraproject fedora 36 <built-in method update of dict object at 0x7fd2a0137240> Operating System
netapp active_iq_unified_manager - <built-in method update of dict object at 0x7fd2dbc1a4c0> Application
netapp clustered_data_ontap_antivirus_connector - <built-in method update of dict object at 0x7fd2dbc1a600> Application
netapp h300s_firmware - <built-in method update of dict object at 0x7fd37033d6c0> Operating System
netapp h500s_firmware - <built-in method update of dict object at 0x7fd2dbc19880> Operating System
netapp h700s_firmware - <built-in method update of dict object at 0x7fd2a0137680> Operating System
netapp h410s_firmware - <built-in method update of dict object at 0x7fd2dbc183c0> Operating System
netapp h410c_firmware - <built-in method update of dict object at 0x7fd3855c0f00> Operating System
siemens sinec_ins * <built-in method update of dict object at 0x7fd3855c1340> Application
siemens sinec_ins 1.0 <built-in method update of dict object at 0x7fd385557240> Application
siemens sinec_ins 1.0 <built-in method update of dict object at 0x7fd36067adc0> Application
siemens sinec_ins 1.0 <built-in method update of dict object at 0x7fd39c423680> Application
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd342b3a880> Operating System
debian debian_linux 11.0 <built-in method update of dict object at 0x7fd39c4203c0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
Yes cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*
Yes cpe:2.3:a:siemens:sinec_ins:1.0:sp2:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

References