Non notée
CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety…
Description
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenSSL | Versions non publiées | |
| ontap_antivirus_connector | 0 | Pas de correctif indiqué |
| ontap_select_deploy_administration_utility | 0 | Pas de correctif indiqué |
| fedora | 36 | Pas de correctif indiqué |
| fedora | 35 | Pas de correctif indiqué |
| active_iq_unified_manager_for_vmware_vsphere | 0 | Pas de correctif indiqué |
| hci_baseboard_management_controller | Versions non publiées | |
| brocade_fabric_operating_system_firmware | 0 | Pas de correctif indiqué |
| SnapCenter | 0 | Pas de correctif indiqué |
Afficher les 9 autres branches Masquer les 9 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| oncommand_insight | 0 | Pas de correctif indiqué |
| smi-s_provider | 0 | Pas de correctif indiqué |
| sinec_ins | Versions non publiées | |
| debian_linux | 11.0 | Pas de correctif indiqué |
| debian_linux | 10.0 | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1 | 1.1 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- www.openssl.org www.openssl.org
- git.openssl.org git.openssl.org
- git.openssl.org git.openssl.org
- FEDORA-2022-3fdc2d3047 lists.fedoraproject.org
- FEDORA-2022-89a17be281 lists.fedoraproject.org
- security.netapp.com security.netapp.com
- FEDORA-2022-41890e9e44 lists.fedoraproject.org
- GLSA-202210-02 security.gentoo.org
- cert-portal.siemens.com cert-portal.siemens.com
- DSA-5343 www.debian.org
- [debian-lts-announce] 20230220 [SECURITY] [DLA 3325-1] openssl security update lists.debian.org
- security.netapp.com security.netapp.com
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de OpenSSL
Les 141 CVE de OpenSSL →
CVE-2026-84784
Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a…
Non notée
CVE-2026-84783
Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached…
Non notée
CVE-2026-84782
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended…
Non notée
CVE-2026-77696
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing…
Non notée