Not rated

CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety…

Description

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).

Affected products and versions

Product	Affected versions	Fixed in
OpenSSL	Versions not published
ontap_antivirus_connector	0	No fix stated
ontap_select_deploy_administration_utility	0	No fix stated
fedora	36	No fix stated
fedora	35	No fix stated
active_iq_unified_manager_for_vmware_vsphere	0	No fix stated
hci_baseboard_management_controller	Versions not published
brocade_fabric_operating_system_firmware	0	No fix stated
SnapCenter	0	No fix stated

Show the 9 other branches

Product	Affected versions	Fixed in
oncommand_insight	0	No fix stated
smi-s_provider	0	No fix stated
sinec_ins	Versions not published
debian_linux	11.0	No fix stated
debian_linux	10.0	No fix stated
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.0 → < 3.1.5	3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1	3.1.0 → < 3.1.5	3.1.5
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1	earliest → < 1.1	1.1
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.0 → < 3.1.5	3.1.5