UpHeron
All vulnerabilities

Servers and applications

CVE-2022-2097

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher…

Severity
Medium 5.3
Published
5 Jul 2022
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.1.1q, 3.0.5
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.1.1 before 1.1.1q
  • From 3.0.0 before 3.0.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-2097
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-2097