Поиск уязвимостей
Количество 37
Количество 37
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2097
CVE-2022-2097
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimi ...
SUSE-SU-2022:2328-1
Security update for openssl-1_1
SUSE-SU-2022:2312-1
Security update for openssl-1_1
SUSE-SU-2022:2311-1
Security update for openssl-1_1
GHSA-3wx7-46ch-7rq2
AES OCB fails to encrypt some bytes
BDU:2022-04284
Уязвимость режима AES OCB библиотеки OpenSSL, позволяющая нарушителю раскрыть защищаемую информацию
SUSE-SU-2022:2309-1
Security update for openssl
SUSE-SU-2022:2308-1
Security update for openssl-1_1
RLSA-2022:5818
Moderate: openssl security update
ELSA-2022-9683
ELSA-2022-9683: openssl security update (MODERATE)
ELSA-2022-5818
ELSA-2022-5818: openssl security update (MODERATE)
ALT-PU-2023-7514
ALT-PU-2023-7514: package `mysql-connector-odbc` update to version 8.0.35-alt2
ALT-PU-2023-7323
ALT-PU-2023-7323: package `mysql-connector-odbc` update to version 8.0.35-alt1
ALT-PU-2022-2184
ALT-PU-2022-2184: package `openssl1.1` update to version 1.1.1q-alt1
ALT-PU-2022-2173
ALT-PU-2022-2173: package `openssl1.1` update to version 1.1.1q-alt1
SUSE-SU-2022:2417-1
Security update for nodejs12
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
 | CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
 | CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
 | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад | |
| CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimi ... | CVSS3: 5.3 | 5% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:2328-1 Security update for openssl-1_1 | 5% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:2312-1 Security update for openssl-1_1 | 5% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:2311-1 Security update for openssl-1_1 | 5% Низкий | больше 4 лет назад | |
| GHSA-3wx7-46ch-7rq2 AES OCB fails to encrypt some bytes | CVSS3: 7.5 | 5% Низкий | больше 4 лет назад |
 | BDU:2022-04284 Уязвимость режима AES OCB библиотеки OpenSSL, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 3.7 | 5% Низкий | больше 4 лет назад |
| SUSE-SU-2022:2309-1 Security update for openssl | больше 4 лет назад | ||
| SUSE-SU-2022:2308-1 Security update for openssl-1_1 | больше 4 лет назад | ||
 | RLSA-2022:5818 Moderate: openssl security update | больше 4 лет назад | ||
| ELSA-2022-9683 ELSA-2022-9683: openssl security update (MODERATE) | больше 4 лет назад | ||
| ELSA-2022-5818 ELSA-2022-5818: openssl security update (MODERATE) | больше 4 лет назад | ||
| ALT-PU-2023-7514 ALT-PU-2023-7514: package `mysql-connector-odbc` update to version 8.0.35-alt2 | CVSS3: 9.1 | почти 3 года назад | |
| ALT-PU-2023-7323 ALT-PU-2023-7323: package `mysql-connector-odbc` update to version 8.0.35-alt1 | CVSS3: 9.1 | почти 3 года назад | |
| ALT-PU-2022-2184 ALT-PU-2022-2184: package `openssl1.1` update to version 1.1.1q-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2173 ALT-PU-2022-2173: package `openssl1.1` update to version 1.1.1q-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| SUSE-SU-2022:2417-1 Security update for nodejs12 | больше 4 лет назад |
Уязвимостей на страницу