PT-2022-25147 · Openssl+3 · Openssl+3

Paul Dale + 1 · Published 2022-12-13 · Updated 2024-08-01 · CVE-2022-3996

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description The issue arises when an X.509 certificate contains a malformed policy constraint and policy processing is enabled. This results in a write lock being taken twice recursively, leading to a denial of service when the affected process hangs on some operating systems, most notably Windows. Policy processing is enabled by passing the -policy argument to the command line utilities or by calling the X509 VERIFY PARAM set1 policies() function. It is worth noting that policy processing being enabled on a publicly facing server is not considered a common setup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

AZL-40306

CVE-2022-3996

GHSA-VR8J-HGMM-JH9R

OPENSUSE-SU-2022_4586-1

OPENSUSE-SU-2024:12573-1

SUSE-SU-2022:4586-1

USN-6039-1

Affected Products

Linuxmint

Openssl

Suse

Ubuntu

References · 27

• https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7 · Patch
• https://openssl.org/news/secadv/20221213.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3996 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-3996 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-3996 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vr8j-hgmm-jh9r · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4586-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6039-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3996 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12573-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3996 · Security Note
• https://ubuntu.com/security/CVE-2023-0466 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3996 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6039-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-3996 · Vendor Advisory