Log in Start free

Vulnerability · Published Feb 8, 2023 · Assigned by openssl

CVE-2022-4304Timing Oracle in RSA Decryption

Medium 5.9

In plain English

A medium-severity security flaw in OpenSSL from OpenSSL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 23.5% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)23.5%top 2.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8edk2-aarch6420220126gitbb1bba3d77-4.el8ALSA-2023:2932
AlmaLinux:9edk2-aarch6420221207gitfff6d81270b5-9.el9_2ALSA-2023:2165
AlmaLinux:8edk2-ovmf20220126gitbb1bba3d77-4.el8ALSA-2023:2932
AlmaLinux:9edk2-ovmf20221207gitfff6d81270b5-9.el9_2ALSA-2023:2165
AlmaLinux:9edk2-tools20221207gitfff6d81270b5-9.el9_2ALSA-2023:2165
AlmaLinux:9edk2-tools-doc20221207gitfff6d81270b5-9.el9_2ALSA-2023:2165
AlmaLinux:8openssl1:1.1.1k-9.el8_7ALSA-2023:1405
AlmaLinux:9openssl1:3.0.1-47.el9_1ALSA-2023:0946
AlmaLinux:8openssl-devel1:1.1.1k-9.el8_7ALSA-2023:1405
AlmaLinux:9openssl-devel1:3.0.1-47.el9_1ALSA-2023:0946
AlmaLinux:8openssl-libs1:1.1.1k-9.el8_7ALSA-2023:1405
AlmaLinux:9openssl-libs1:3.0.1-47.el9_1ALSA-2023:0946
AlmaLinux:8openssl-perl1:1.1.1k-9.el8_7ALSA-2023:1405
AlmaLinux:9openssl-perl1:3.0.1-47.el9_1ALSA-2023:0946
Alpine:v3.20openssl3.0.8-r0ALPINE-CVE-2022-4304
Alpine:v3.21openssl3.0.8-r0ALPINE-CVE-2022-4304
Alpine:v3.22openssl3.0.8-r0ALPINE-CVE-2022-4304
Alpine:v3.23openssl3.0.8-r0ALPINE-CVE-2022-4304
Alpine:v3.24openssl3.0.8-r0ALPINE-CVE-2022-4304
Debian:12openssl3.0.8-1DEBIAN-CVE-2022-4304
Debian:13openssl3.0.8-1DEBIAN-CVE-2022-4304
Debian:14openssl3.0.8-1DEBIAN-CVE-2022-4304
Rocky Linux:8openssl1:1.1.1k-9.el8_7RLSA-2023:1405
Rocky Linux:9openssl1:3.0.1-47.el9_1RLSA-2023:0946
Ubuntu:22.04:LTSedk22022.02-3ubuntu0.22.04.4USN-7894-1
Ubuntu:22.04:LTSedk22022.02-3ubuntu0.22.04.4UBUNTU-CVE-2022-4304
Ubuntu:24.04:LTSedk22024.02-2ubuntu0.6USN-7894-1
Ubuntu:22.04:LTSnodejs12.22.9~dfsg-1ubuntu3.3USN-6564-1
Ubuntu:22.04:LTSnodejs12.22.9~dfsg-1ubuntu3.3UBUNTU-CVE-2022-4304
Ubuntu:22.04:LTSopenssl3.0.2-0ubuntu1.8USN-5844-1
Ubuntu:22.04:LTSopenssl3.0.2-0ubuntu1.8UBUNTU-CVE-2022-4304

Affected products (as reported)

VendorProductVersions
OpenSSL OpenSSL 3.0.0 – before 3.0.81.1.1 – before 1.1.1t1.0.2 – before 1.0.2zg

Weakness: CWE-203 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References