Vulnerabilities > CVE-2022-4304 - Information Exposure Through Discrepancy vulnerability in multiple products

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

high complexity

openssl

stormshield

CWE-203

NVD

Published: 2023-02-08

Updated: 2024-02-04

Summary

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.

Vulnerable Configurations

Part	Description	Count
Application	Openssl Openssl Openssl 3.0.0 Openssl Openssl 3.0.1 Openssl Openssl 3.0.2 Openssl Openssl 3.0.3 Openssl Openssl 3.0.4 Openssl Openssl 3.0.5 Openssl Openssl 3.0.6 Openssl Openssl 3.0.7 Openssl Openssl 1.1.1 Openssl Openssl 1.1.1A Openssl Openssl 1.1.1B Openssl Openssl 1.1.1C Openssl Openssl 1.1.1D Openssl Openssl 1.1.1E Openssl Openssl 1.1.1F Openssl Openssl 1.1.1G Openssl Openssl 1.1.1H Openssl Openssl 1.1.1I Openssl Openssl 1.1.1J Openssl Openssl 1.1.1K Openssl Openssl 1.1.1L Openssl Openssl 1.1.1M Openssl Openssl 1.1.1N Openssl Openssl 1.1.1O Openssl Openssl 1.1.1P Openssl Openssl 1.1.1Q Openssl Openssl 1.1.1R Openssl Openssl 1.1.1S Openssl Openssl 1.0.2 Openssl Openssl 1.0.2A Openssl Openssl 1.0.2B Openssl Openssl 1.0.2C Openssl Openssl 1.0.2D Openssl Openssl 1.0.2E Openssl Openssl 1.0.2F Openssl Openssl 1.0.2G Openssl Openssl 1.0.2H Openssl Openssl 1.0.2I Openssl Openssl 1.0.2J Openssl Openssl 1.0.2K Openssl Openssl 1.0.2L Openssl Openssl 1.0.2M Openssl Openssl 1.0.2N Openssl Openssl 1.0.2O Openssl Openssl 1.0.2P Openssl Openssl 1.0.2Q Openssl Openssl 1.0.2R Openssl Openssl 1.0.2S Openssl Openssl 1.0.2T Openssl Openssl 1.0.2U Openssl Openssl 1.0.2V Openssl Openssl 1.0.2W Openssl Openssl 1.0.2X Openssl Openssl 1.0.2Y Openssl Openssl 1.0.2Za Openssl Openssl 1.0.2Zb Openssl Openssl 1.0.2Zc Openssl Openssl 1.0.2Zd Openssl Openssl 1.0.2Ze Openssl Openssl 1.0.2Zf	94
Application	Stormshield Stormshield Stormshield Network Security 4.4.0 Stormshield Stormshield Network Security 4.5.1 Stormshield Stormshield Network Security 4.6.0 Stormshield Stormshield Network Security 4.6.2 Stormshield Stormshield Network Security 4.0.0 Stormshield Stormshield Network Security 4.0.1 Stormshield Stormshield Network Security 4.0.4 Stormshield Stormshield Network Security 4.1.1 Stormshield Stormshield Network Security 4.3.0 Stormshield Stormshield Network Security 4.3.12.1 Stormshield Stormshield Network Security 4.3.14 Stormshield Stormshield Network Security 4.3.15 Stormshield Stormshield Network Security 3.8.0 Stormshield Stormshield Network Security 3.8.1 Stormshield Stormshield Network Security 3.9.1 Stormshield Stormshield Network Security 3.10.0 Stormshield Stormshield Network Security 3.11.0 Stormshield Stormshield Network Security 3.11.1 Stormshield Stormshield Network Security 3.11.19 Stormshield Stormshield Network Security 3.11.20 Stormshield Stormshield Network Security 3.11.21 Stormshield Stormshield Network Security 2.8.0 Stormshield Stormshield Network Security 2.8.1 Stormshield Stormshield Network Security 2.8.2 Stormshield Stormshield Network Security 2.9.0 Stormshield Stormshield Network Security 2.10.0 Stormshield Stormshield Network Security 2.11.0 Stormshield Stormshield Network Security 2.12.0 Stormshield Stormshield Network Security 2.13.0 Stormshield Stormshield Network Security 2.14.0 Stormshield Stormshield Network Security 2.15.0 Stormshield Stormshield Network Security 3.0.0 Stormshield Stormshield Network Security 3.0.1 Stormshield Stormshield Network Security 3.0.2 Stormshield Stormshield Network Security 3.0.3 Stormshield Stormshield Network Security 3.1.0 Stormshield Stormshield Network Security 3.1.1 Stormshield Stormshield Network Security 3.1.2 Stormshield Stormshield Network Security 3.2.0 Stormshield Stormshield Network Security 3.2.1 Stormshield Stormshield Network Security 3.3.0 Stormshield Stormshield Network Security 3.3.1 Stormshield Stormshield Network Security 3.3.2 Stormshield Stormshield Network Security 3.4.0 Stormshield Stormshield Network Security 3.4.1 Stormshield Stormshield Network Security 3.4.2 Stormshield Stormshield Network Security 3.4.3 Stormshield Stormshield Network Security 3.5.0 Stormshield Stormshield Network Security 3.5.1 Stormshield Stormshield Network Security 3.5.2 Stormshield Stormshield Network Security 3.6.0 Stormshield Stormshield Network Security 3.6.1 Stormshield Stormshield Network Security 3.7.0 Stormshield Stormshield Network Security 3.7.1 Stormshield Stormshield Network Security 3.7.10 Stormshield Stormshield Network Security 3.7.13 Stormshield Stormshield Network Security 3.7.33 Stormshield Stormshield Network Security 2.7.0 Stormshield Stormshield Network Security 2.7.1 Stormshield Stormshield Network Security 2.7.2 Stormshield Stormshield Network Security 2.7.3 Stormshield Stormshield Network Security 2.7.4 Stormshield Stormshield Network Security 2.7.10 Stormshield Endpoint Security 2.0.0 Stormshield Endpoint Security 2.0.2 Stormshield Endpoint Security 2.1.0 Stormshield Endpoint Security 2.1.1 Stormshield Endpoint Security 2.3.0 Stormshield Endpoint Security 2.3.2 Stormshield Endpoint Security 2.4.1 Stormshield Endpoint Security 2.4.2 Stormshield Endpoint Security 7.2.39 Stormshield Sslvpn -	73

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Vulnerabilities > CVE-2022-4304 - Information Exposure Through Discrepancy vulnerability in multiple products

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Related news

References