VDB
GHSA-3wx7-46ch-7rq2
GHSA-3wx7-46ch-7rq2
PUBLISHED
CVSS 7.5 HIGH
AES OCB fails to encrypt some bytes
Record from GitHub Advisory Database · Published July 6, 2022
openssl-src is fixed in 300.0.9 and 111.22.0 (crates.io)
AES OCB fails to encrypt some bytes
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| openssl-src | crates.io | 300.0.9, 111.22.0 |
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | ruby-3.1 | * |
| crates.io | openssl-src | 0, 300.0.0 |
| chainguard | ruby-3.1 | * |
Timeline
- Jul 6, 2022 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-3wx7-46ch-7rq2
vulnetix vdb fixes GHSA-3wx7-46ch-7rq2Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-3wx7-46ch-7rq2/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-2097 advisory
- https://www.openssl.org/news/secadv/20220705.txt url
- https://security.netapp.com/advisory/ntap-20230420-0008 url
- https://security.netapp.com/advisory/ntap-20220715-0011 url
- https://security.gentoo.org/glsa/202210-02 url
- https://rustsec.org/advisories/RUSTSEC-2022-0032.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7 url
- https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html url
- https://github.com/alexcrichton/openssl-src-rs package
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93 url
- https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93 url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431 url
- https://www.debian.org/security/2023/dsa-5343 url
- https://security.netapp.com/advisory/ntap-20240621-0006 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK url
…and 1 more