OpenSSL 3.0.4 on 64-bit RSA Private Key rsaz_exp_x2.c ossl_rsaz_mod_exp_avx512_x2 memory corruption

Summaryinfo

A vulnerability described as very critical has been identified in OpenSSL 3.0.4 on 64-bit. This affects the function ossl_rsaz_mod_exp_avx512_x2 of the file rsaz_exp_x2.c of the component RSA Private Key Handler. The manipulation results in memory corruption. This vulnerability is known as CVE-2022-2274. It is possible to launch the attack remotely. No exploit is available. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability classified as very critical has been found in OpenSSL 3.0.4 on 64-bit (Network Encryption Software). Affected is the function ossl_rsaz_mod_exp_avx512_x2 of the file rsaz_exp_x2.c of the component RSA Private Key Handler. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.

The weakness was published 07/01/2022 as 18625. The advisory is shared for download at github.com. This vulnerability is traded as CVE-2022-2274 since 06/30/2022. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 11/26/2024).

As 0-day the estimated underground price was around $100k and more. The vulnerability scanner Nessus provides a plugin with the ID 211827 (Oracle Linux 9 : edk2 (ELSA-2024-12842)), which helps to determine the existence of the flaw in a target environment.

Applying the patch 4d8a88c134df634ba610ff8db1eb8478ac5fd345 is able to eliminate this problem. The bugfix is ready for download at git.openssl.org.

The vulnerability is also documented in the vulnerability database at Tenable (211827). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Network Encryption Software

Name

• OpenSSL

Version

• 3.0.4

License

• open-source

Website

• Product: https://www.openssl.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion