CVE-2022-2097
- Source
- https://cve.org/CVERecord?id=CVE-2022-2097
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2097.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-2097
- Aliases
- Downstream
ALPINE (1)
ALSA (2)
BELL (1)
DEBIAN (1)
JLSEC (1)
MGASA (1)
RHSA (2)
RLSA (1)
SUSE (7)
UBUNTU (1)
- Related
- Published
- 2022-07-05T10:30:13Z
- Modified
- 2026-11-11T13:05:41Z
- Summary
- AES OCB fails to encrypt some bytes
- Details
-
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
- Database specific
{ "cna_assigner": "openssl", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2097.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "introduced": "Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4)" }, { "last_affected": "Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4)" }, { "introduced": "Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)" }, { "last_affected": "Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] } ] }- References
-
- https://cert-portal.siemens.com/productcert/html/ssa-332410.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-625862.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-879734.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93
- https://www.openssl.org/news/secadv/20220705.txt
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2097.json
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/
- https://nvd.nist.gov/vuln/detail/CVE-2022-2097
- https://security.gentoo.org/glsa/202210-02
- https://security.netapp.com/advisory/ntap-20220715-0011/
- https://security.netapp.com/advisory/ntap-20230420-0008/
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://www.debian.org/security/2023/dsa-5343
- https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html
Affected packages
Git / github.com/kzalewski/openssl-1.1.1
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2097.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "145081246022159018632346591780852072638",
"length": 3301
},
"id": "CVE-2022-2097-0115da44",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/asn1/a_mbstr.c",
"function": "ASN1_mbstring_ncopy"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"151496904140441974460168482169374190024",
"252388763391472546762550272601898462670",
"322392321298523662111637318544365606017",
"92792830564595161366593755445407076135",
"125370360892352031658984319622272957499",
"135472893131710710891792272165369874557",
"144388576385066123595834036136006620631",
"251569583518298411383983956510462999062",
"190752638376984200658169048788492801771",
"100442701798321830557371459503827921141",
"157868922838337151802955969179465392317",
"247133924118207300622477622521703740882"
],
"threshold": 0.9
},
"id": "CVE-2022-2097-10c2ef8d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/pkcs7/pk7_smime.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "70418561901620867514045039520920039213",
"length": 148
},
"id": "CVE-2022-2097-315e1fbb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/asn1/a_mbstr.c",
"function": "out_utf8"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"131154213046974496778457434048691074837",
"11412147066710286517722597447846471117",
"264770296592556677305107142032766937388",
"276397443140848844849079658380453872857",
"195870554892312134442829321964179019399"
],
"threshold": 0.9
},
"id": "CVE-2022-2097-87e36a00",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "include/openssl/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"126341431044776940549287222658722596257",
"130570927788432269899785168744788951172",
"194169660864360803525450492876473860091",
"110467782499934282756168500046914951485",
"263946134258438649256241779625323641089",
"232531144570205203842568959033909256821",
"50105547378036962616739399907795763233",
"35026789599821935911816818772042439275",
"114710208109255960726965919362105298762",
"125554540231637930487019176647117002503",
"332182547294553747961268671162250805775",
"276033856309860817184326883455361222142",
"318268129131630080093563577138856184340",
"128526451235089518533697095563624199685",
"75522999902161732913968142567093758009",
"233242365504435285051066046524808432015",
"197089990496411212407345093272572794903",
"203627204430850126635677767987115907052",
"110527555710504927393608627867030602220",
"129739062881190220811156277727848860285",
"64544717289057079449815286406570439951",
"201167284819377777248970251144566099169",
"222516930768176972010755807924686646230",
"90961471150301180096894104068604511683",
"128676851434441285018275177161089865561",
"129724505883296824298208229090221093179",
"225269234833384762270352983556638638592",
"90371650052899301631217696225591147992",
"246784737627998664119002956221509877842",
"315371643750711437594895449353374659288",
"286011929765548229255520019142347591441",
"220624038106194157196845376518684753434",
"174882410006964856548150664239804105254",
"116231510630487651899483668166785513275"
],
"threshold": 0.9
},
"id": "CVE-2022-2097-89e18e76",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/asn1/tasn_dec.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"243971072618222724126117138392541085907",
"20203436555900253968670420024125559450",
"261033251671054815966464244630025010874",
"142558467251092045021326807845044327645",
"117558078243606577959089637136237792030",
"124332917225391423252605388545338682722",
"236022608503733170562534553288003810395",
"339832511801857794746629870610675811880",
"219260262152978755644652810379289549161",
"238161164963855964634408949729400551790",
"305007661457817428636275014467276783572",
"224942011457082636465204480559032896603",
"161399292792765951653776025419102349086",
"249748745323502641665219507560747603718",
"133814635171188589537358224623499256384",
"166636678108051380708454788668826388282",
"148812255457104429740188330155555022957",
"67995203963239490129688609208357985916",
"46589837028236721023105012731504719567",
"61425611895307496760454057009746874404"
],
"threshold": 0.9
},
"id": "CVE-2022-2097-8be4f956",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/asn1/a_mbstr.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "60884720753669845608764646390078165978",
"length": 2404
},
"id": "CVE-2022-2097-8dac97cc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/cms/cms_pwri.c",
"function": "cms_RecipientInfo_pwri_crypt"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"319646123228225632035521226865494527950",
"52841444872899117514496250284924185664",
"33853134948390324832871761212087746225",
"81188860042095766577152905858367341175",
"302749459819436303573414214711383738500",
"106372169618065324582769687411773396323",
"255586470514418239073904203556570502151",
"316909758438434070933019317604952931093",
"227036639418218030553513135503985645880",
"19797040175335443903820697047342526981",
"3213252085324805485799329367541299827",
"167277605188112932709311947349617776953",
"33676618202441094170922943458357128290"
],
"threshold": 0.9
},
"id": "CVE-2022-2097-c30f17c3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/cms/cms_pwri.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219999985288845958916653358585559913606",
"length": 2843
},
"id": "CVE-2022-2097-db231d4a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/asn1/tasn_dec.c",
"function": "asn1_ex_c2i"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "130089047505679726786813950750828918851",
"length": 1031
},
"id": "CVE-2022-2097-df118fd8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
"target": {
"file": "crypto/cms/cms_pwri.c",
"function": "kek_unwrap_key"
}
}
]
vanir_signatures_modified
"2026-11-11T13:05:41Z"
Git / github.com/openssl/openssl
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openssl/openssl
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "1.1.1" }, { "fixed": "1.1.1q" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.0" }, { "fixed": "3.0.5" } ], "source": "CPE_RANGE" } ] }
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2097.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"28170854778703993674264004058177114599",
"73132526844288570625317440636111911761",
"177405411499435185068645597737938634778",
"224809958623850711330610094965797758930",
"295554444428855106393106961197201359586"
],
"threshold": 0.9
},
"id": "CVE-2022-2097-c377fa22",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
"target": {
"file": "include/openssl/opensslv.h"
}
}
]
vanir_signatures_modified
"2026-11-11T13:05:41Z"