CVE Details for CVE: CVE-2022-2097
Summary
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
Timestamps
Last major update 23-07-2022 - 04:15
Published 05-07-2022 - 11:15
Last modified 23-07-2022 - 04:15
Vulnerable Configurations
  • cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre1:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre1:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre2:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre2:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre3:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre3:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre4:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre4:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre5:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre5:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre6:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre6:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre7:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre7:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre8:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre8:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1:pre9:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1:pre9:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1a:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1a:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1b:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1b:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1c:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1c:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1d:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1d:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1e:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1e:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1f:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1f:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1g:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1g:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1h:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1h:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1i:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1i:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1j:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1j:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1k:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1k:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1l:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1l:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1m:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1m:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1n:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1n:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1o:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1o:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:1.1.1p:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:1.1.1p:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha1:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha1:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha10:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha10:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha11:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha11:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha12:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha12:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha13:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha13:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha14:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha14:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha15:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha15:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha16:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha16:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha17:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha17:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha2:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha2:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha3:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha3:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha4:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha4:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha5:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha5:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha6:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha6:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha7:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha7:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha8:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha8:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha9:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha9:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
  • In this attack, some asset (information, functionality, identity, etc.) is protected by a finite secret value. The attacker attempts to gain access to this asset by using trial-and-error to exhaustively explore all the possible secret values in the hope of finding the secret (or a value that is functionally equivalent) that will unlock the asset. Examples of secrets can include, but are not limited to, passwords, encryption keys, database lookup keys, and initial values to one-way functions. The key factor in this attack is the attackers' ability to explore the possible secret space rapidly. This, in turn, is a function of the size of the secret space and the computational power the attacker is able to bring to bear on the problem. If the attacker has modest resources and the secret space is large, the challenge facing the attacker is intractable. Assuming a finite secret space, a brute force attack will eventually succeed. The defender must rely on making sure that the time and resources necessary to do so will exceed the value of the information.
  • An adversary engages in activities to decipher and/or decode protocol information for a network or application communication protocol used for transmitting information between interconnected nodes or systems on a packet-switched data network. While this type of analysis involves the analysis of a networking protocol inherently, it does not require the presence of an actual or physical network. Although certain techniques for protocol analysis benefit from manipulating live 'on-the-wire' interactions between communicating components, static or dynamic analysis techniques applied to executables as well as to device drivers, such as network interface drivers, can also be used to reveal the function and characteristics of a communication protocol implementation. Depending upon the methods used the process may involve observing, interacting, and modifying actual communications occurring between hosts. The goal of protocol analysis is to derive the data transmission syntax, as well as to extract the meaningful content, including packet or content delimiters used by the protocol. This type of analysis is often performed on closed-specification protocols, or proprietary protocols, but is also useful for analyzing publicly available specifications to determine how particular implementations deviate from published specifications.
  • An attacker, armed with the cipher text and the encryption algorithm used, performs an exhaustive (brute force) search on the key space to determine the key that decrypts the cipher text to obtain the plaintext.
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
CVSS3
Base
7.5
Impact
3.6
Exploitability
3.9
Access
Attack ComplexityAttack vectorPrivileges RequiredScopeUser Interaction
LOW NETWORK NONE UNCHANGED NONE
Impact
ConfidentialityIntegrityAvailability
HIGH NONE NONE
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:N/A:N
cvss3-vector via4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N