AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Aug 11, 2022 | Jul 5, 2022 |
| Alpine Linux | — | Upgrade openssl3Upgrade opensslUpgrade openssl1.1-compat | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade edk2-aarch64Upgrade openssl11-develUpgrade edk2-debuginfoUpgrade edk2-tools-pythonUpgrade edk2-toolsUpgrade openssl11-debuginfoUpgrade edk2-tools-docUpgrade openssl11Upgrade edk2-ovmfUpgrade openssl11-staticUpgrade openssl11-libs | Mar 7, 2023 | Jul 5, 2022 |
| Amazon_linux_2023 | — | Upgrade openssl-libsUpgrade openssl-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade openssl-develUpgrade opensslUpgrade openssl-perl | Feb 17, 2025 | Jul 5, 2022 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-debugsourceUpgrade openssl-libs-debuginfoUpgrade openssl-libsUpgrade openssl-perl | Aug 11, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade openssl | Feb 9, 2023 | Jul 5, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade nodeUpgrade mysql-server57Upgrade mysql-client57Upgrade openssl-develUpgrade node14Upgrade mysql-connector-c++Upgrade node16Upgrade opensslUpgrade mysql-server80Upgrade mysql-connector-odbcUpgrade mysql-client80 | Nov 4, 2022 | Oct 30, 2022 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 17, 2022 | Jul 5, 2022 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jul 6, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsgx-launchUpgrade libsgx-ae-leUpgrade libsgx-urtsUpgrade sgxsdkUpgrade libsgx-aesm-launch-pluginUpgrade sgx-aesm-serviceUpgrade libsgx-enclave-common | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111dUpgrade openssl111d-staticUpgrade openssl111d-develUpgrade openssl111d-libs | Jun 9, 2023 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-perlUpgrade openssl-devel | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssl-libsUpgrade openssl-perlUpgrade openssl | Sep 14, 2022 | Jul 5, 2022 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory36 | Oct 12, 2022 | Jul 5, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 5.7.40Upgrade to MySQL version 8.0.31 | Jun 15, 2026 | Jul 5, 2022 |
| Oracle_linux | — | Upgrade graalvm22-ce-11-javascriptUpgrade graalvm22-ce-11Upgrade graalvm22-ce-11-rubyUpgrade graalvm22-ce-11-native-image-llvm-backendUpgrade graalvm22-ce-11-develUpgrade graalvm22-ce-11-llvm-toolchainUpgrade graalvm22-ce-17-rubyUpgrade graalvm22-ce-17-polyglotUpgrade graalvm22-ce-11-toolsUpgrade openssl-staticUpgrade graalvm22-ce-17-ruby-develUpgrade openssl-debugsourceUpgrade graalvm22-ce-11-espressoUpgrade graalvm22-ce-11-ruby-develUpgrade graalvm22-ce-17-fastrUpgrade graalvm22-ce-17-jdkUpgrade graalvm22-ce-11-polyglotUpgrade graalvm22-ce-11-llvmUpgrade graalvm22-ce-11-nodejs-develUpgrade graalvm22-ce-17-llvm-toolchainUpgrade openssl-develUpgrade graalvm22-ce-17-nodejsUpgrade graalvm22-ce-17-wasmUpgrade graalvm22-ce-17Upgrade graalvm22-ce-11-jdkUpgrade graalvm22-ce-17-pythonUpgrade graalvm22-ce-17-libpolyglotUpgrade graalvm22-ce-17-espresso-llvmUpgrade graalvm22-ce-17-espressoUpgrade graalvm22-ce-11-python-develUpgrade graalvm22-ce-17-toolsUpgrade openssl-libsUpgrade graalvm22-ce-17-python-develUpgrade graalvm22-ce-17-develUpgrade graalvm22-ce-11-fastrUpgrade graalvm22-ce-17-llvmUpgrade openssl-perlUpgrade opensslUpgrade graalvm22-ce-11-libpolyglotUpgrade graalvm22-ce-17-nodejs-develUpgrade graalvm22-ce-11-pythonUpgrade graalvm22-ce-11-nodejsUpgrade graalvm22-ce-11-native-imageUpgrade graalvm22-ce-11-espresso-llvmUpgrade graalvm22-ce-17-native-imageUpgrade graalvm22-ce-17-javascriptUpgrade graalvm22-ce-11-wasmUpgrade graalvm22-ce-17-native-image-llvm-backend | Aug 3, 2022 | Jul 5, 2022 |
| Redhat_linux | — | Upgrade openssl-debuginfoUpgrade openssl-debugsourceUpgrade openssl-libsUpgrade openssl-libs-debuginfoNo solution existsUpgrade openssl-perlUpgrade opensslUpgrade openssl-devel | Aug 11, 2022 | Jul 5, 2022 |
| Rocky_linux | — | Upgrade openssl-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl-devel | Mar 12, 2024 | Jul 5, 2022 |
| Suse | — | Upgrade nodejs12Upgrade libopenssl-3-develUpgrade npm12Upgrade nodejs12-docsUpgrade nodejs12-develUpgrade libopenssl-1_1-develUpgrade openssl-1_1Upgrade openssl-3Upgrade libopenssl-3-devel-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_1-hmac-32bitUpgrade openssl-3-docUpgrade libopenssl1_1Upgrade libopenssl1_1-hmacUpgrade openssl-1_1-docUpgrade libopenssl3Upgrade libopenssl3-32bitUpgrade libopenssl1_1-32bit | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade libnode-devUpgrade nodejs-docUpgrade libnode72Upgrade libssl1.1Upgrade nodejsUpgrade libssl3 | Mar 22, 2023 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub