{"id":"CVE-2022-2097","summary":"AES OCB fails to encrypt some bytes","details":"AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).","aliases":["GHSA-3wx7-46ch-7rq2","RUSTSEC-2022-0032"],"modified":"2026-11-11T13:05:41.151503680Z","published":"2022-07-05T10:30:13.658Z","related":["ALSA-2022:5818","ALSA-2022:6224","SUSE-SU-2022:2306-1","SUSE-SU-2022:2308-1","SUSE-SU-2022:2309-1","SUSE-SU-2022:2311-1","SUSE-SU-2022:2312-1","SUSE-SU-2022:2328-1","SUSE-SU-2022:2417-1","openSUSE-SU-2022:2328-1","openSUSE-SU-2024:12179-1","openSUSE-SU-2024:12204-1"],"database_specific":{"cna_assigner":"openssl","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2097.json","unresolved_ranges":[{"extracted_events":[{"range":[{"introduced":"Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4)"},{"last_affected":"Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4)"},{"introduced":"Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)"},{"last_affected":"Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"}]}]},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-332410.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf"},{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431"},{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93"},{"type":"WEB","url":"https://www.openssl.org/news/secadv/20220705.txt"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2097.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2097"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202210-02"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20220715-0011/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230420-0008/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2023/dsa-5343"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kzalewski/openssl-1.1.1","events":[{"introduced":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"fixed":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1"},{"fixed":"1.1.1q"}]}]}}],"database_specific":{"vanir_signatures_modified":"2026-11-11T13:05:41Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2097.json","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c","function":"ASN1_mbstring_ncopy"},"deprecated":false,"digest":{"function_hash":"145081246022159018632346591780852072638","length":3301},"id":"CVE-2022-2097-0115da44","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/pkcs7/pk7_smime.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["151496904140441974460168482169374190024","252388763391472546762550272601898462670","322392321298523662111637318544365606017","92792830564595161366593755445407076135","125370360892352031658984319622272957499","135472893131710710891792272165369874557","144388576385066123595834036136006620631","251569583518298411383983956510462999062","190752638376984200658169048788492801771","100442701798321830557371459503827921141","157868922838337151802955969179465392317","247133924118207300622477622521703740882"]},"id":"CVE-2022-2097-10c2ef8d"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"function":"out_utf8","file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"function_hash":"70418561901620867514045039520920039213","length":148},"id":"CVE-2022-2097-315e1fbb","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2022-2097-87e36a00","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"include/openssl/opensslv.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["131154213046974496778457434048691074837","11412147066710286517722597447846471117","264770296592556677305107142032766937388","276397443140848844849079658380453872857","195870554892312134442829321964179019399"]}},{"id":"CVE-2022-2097-89e18e76","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/tasn_dec.c"},"deprecated":false,"digest":{"line_hashes":["126341431044776940549287222658722596257","130570927788432269899785168744788951172","194169660864360803525450492876473860091","110467782499934282756168500046914951485","263946134258438649256241779625323641089","232531144570205203842568959033909256821","50105547378036962616739399907795763233","35026789599821935911816818772042439275","114710208109255960726965919362105298762","125554540231637930487019176647117002503","332182547294553747961268671162250805775","276033856309860817184326883455361222142","318268129131630080093563577138856184340","128526451235089518533697095563624199685","75522999902161732913968142567093758009","233242365504435285051066046524808432015","197089990496411212407345093272572794903","203627204430850126635677767987115907052","110527555710504927393608627867030602220","129739062881190220811156277727848860285","64544717289057079449815286406570439951","201167284819377777248970251144566099169","222516930768176972010755807924686646230","90961471150301180096894104068604511683","128676851434441285018275177161089865561","129724505883296824298208229090221093179","225269234833384762270352983556638638592","90371650052899301631217696225591147992","246784737627998664119002956221509877842","315371643750711437594895449353374659288","286011929765548229255520019142347591441","220624038106194157196845376518684753434","174882410006964856548150664239804105254","116231510630487651899483668166785513275"],"threshold":0.9}},{"id":"CVE-2022-2097-8be4f956","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","219260262152978755644652810379289549161","238161164963855964634408949729400551790","305007661457817428636275014467276783572","224942011457082636465204480559032896603","161399292792765951653776025419102349086","249748745323502641665219507560747603718","133814635171188589537358224623499256384","166636678108051380708454788668826388282","148812255457104429740188330155555022957","67995203963239490129688609208357985916","46589837028236721023105012731504719567","61425611895307496760454057009746874404"]}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c","function":"cms_RecipientInfo_pwri_crypt"},"deprecated":false,"digest":{"function_hash":"60884720753669845608764646390078165978","length":2404},"id":"CVE-2022-2097-8dac97cc"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["319646123228225632035521226865494527950","52841444872899117514496250284924185664","33853134948390324832871761212087746225","81188860042095766577152905858367341175","302749459819436303573414214711383738500","106372169618065324582769687411773396323","255586470514418239073904203556570502151","316909758438434070933019317604952931093","227036639418218030553513135503985645880","19797040175335443903820697047342526981","3213252085324805485799329367541299827","167277605188112932709311947349617776953","33676618202441094170922943458357128290"]},"id":"CVE-2022-2097-c30f17c3","signature_type":"Line","signature_version":"v1"},{"target":{"function":"asn1_ex_c2i","file":"crypto/asn1/tasn_dec.c"},"deprecated":false,"digest":{"function_hash":"219999985288845958916653358585559913606","length":2843},"id":"CVE-2022-2097-db231d4a","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c","function":"kek_unwrap_key"},"deprecated":false,"digest":{"length":1031,"function_hash":"130089047505679726786813950750828918851"},"id":"CVE-2022-2097-df118fd8","signature_type":"Function","signature_version":"v1"}]}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"introduced":"89cd17a031e022211684eb7eb41190cf1910f9fa"},{"fixed":"ad4910fad22d57c6d685b0ca83bdb7b2bf69d8fd"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"1.1.1"},{"fixed":"1.1.1q"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.0.0"},{"fixed":"3.0.5"}],"source":"CPE_RANGE"}]}}],"versions":["openssl-3.0.4","openssl-3.0.3","openssl-3.0.2","openssl-3.0.1","openssl-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2097.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"],"threshold":0.9},"id":"CVE-2022-2097-c377fa22","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86","target":{"file":"include/openssl/opensslv.h"}}],"vanir_signatures_modified":"2026-11-11T13:05:41Z"}}],"schema_version":"1.9.2"}