Description
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process which leads to sensitive data leakage to an attacker. RSA_public_encrypt() returns the number of bytes written on success and -1 on error. The affected code tests only whether the return value is non-zero. As a result, if RSA encryption fails, encapsulation can still return success to the caller, set the output lengths, and leave the caller to use the contents of the ciphertext buffer as if a valid KEM ciphertext had been produced. If applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an attacker-supplied invalid RSA public key without first validating that key, then this may cause stale or uninitialized contents of the caller-provided ciphertext buffer to be disclosed to the attacker in place of the KEM ciphertext. As a workaround calling EVP_PKEY_public_check() or EVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will mitigate the issue. The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 12 | | =3.0.10-1 || =3.0.10-1~deb12u1 || =3.0.11-1 || =3.0.11-1~deb12u1 || =3.0.11-1~deb12u2 || =3.0.12-1 || =3.0.12-2 || =3.0.13-1~deb12u1 || =3.0.13-1~deb12u2 || =3.0.14-1~deb12u1 || =3.0.14-1~deb12u2 || =3.0.15-1~deb12u1 || =3.0.16-1~deb12u1 || =3.0.17-1~deb12u1 || =3.0.17-1~deb12u2 || =3.0.17-1~deb12u3 || =3.0.18-1~deb12u1 || =3.0.18-1~deb12u2 || =3.0.19-1~deb12u1 || =3.0.9-1 || >=0 <3.0.19-1~deb12u2 | 3.0.19-1~deb12u2 |
 alpine v3.23 | | =1.1.1-r0 || =1.1.1-r1 || =1.1.1-r2 || =1.1.1-r3 || =1.1.1-r4 || =1.1.1-r5 || =1.1.1a-r0 || =1.1.1a-r1 || =1.1.1b-r0 || =1.1.1b-r1 || =1.1.1c-r0 || =1.1.1c-r1 || =1.1.1d-r1 || =1.1.1d-r2 || =1.1.1d-r3 || =1.1.1d-r4 || =1.1.1d-r5 || =1.1.1e-r0 || =1.1.1f-r0 || =1.1.1g-r0 || =1.1.1h-r0 || =1.1.1i-r0 || =1.1.1j-r0 || =1.1.1k-r0 || =1.1.1k-r1 || =1.1.1l-r0 || =3.0.0-r0 || =3.0.0-r1 || =3.0.0-r2 || =3.0.0-r3 || =3.0.0-r4 || =3.0.1-r0 || =3.0.1-r1 || =3.0.2-r0 || =3.0.3-r0 || =3.0.5-r0 || =3.0.5-r1 || =3.0.5-r2 || =3.0.5-r3 || =3.0.6-r0 || =3.0.7-r0 || =3.0.7-r1 || =3.0.7-r2 || =3.0.8-r0 || =3.0.8-r1 || =3.1.0-r0 || =3.1.0-r1 || =3.1.0-r2 || =3.1.0-r3 || =3.1.0-r4 || =3.1.0-r5 || =3.1.1-r0 || =3.1.1-r1 || =3.1.1-r2 || =3.1.1-r3 || =3.1.2-r0 || =3.1.3-r0 || =3.1.4-r0 || =3.1.4-r1 || =3.1.4-r2 || =3.1.4-r3 || =3.1.4-r4 || =3.1.4-r5 || =3.1.5-r5 || =3.2.1-r0 || =3.2.1-r1 || =3.2.1-r2 || =3.3.0-r0 || =3.3.0-r1 || =3.3.0-r2 || =3.3.0-r3 || =3.3.1-r0 || =3.3.1-r1 || =3.3.1-r2 || =3.3.1-r3 || =3.3.2-r0 || =3.3.2-r1 || =3.3.2-r2 || =3.3.2-r3 || =3.3.2-r4 || =3.3.2-r5 || =3.3.2-r6 || =3.3.3-r0 || =3.5.0-r0 || =3.5.1-r0 || =3.5.2-r0 || =3.5.3-r0 || =3.5.3-r1 || =3.5.3-r2 || =3.5.4-r0 || =3.5.5-r0 || >=0 <3.5.6-r0 | 3.5.6-r0 |
 rpm rhel9 | | | 1:3.5.5-2.el9_8 |
rpm rhel10 | | | 1:3.5.5-2.el10_2 |
debian 13 | | =3.5.1-1 || =3.5.1-1+deb13u1 || =3.5.2-1 || =3.5.3-1 || =3.5.4-1 || =3.5.4-1~deb13u1 || =3.5.4-1~deb13u2 || =3.5.5-1~deb13u1 || >=0 <3.5.5-1~deb13u2 | 3.5.5-1~deb13u2 |
debian 14 | | =3.5.1-1 || =3.5.2-1 || =3.5.3-1 || =3.5.4-1 || =3.5.4-1~deb13u1 || =3.5.4-1~deb13u2 || =3.5.5-1 || =3.5.5-1~deb13u1 || =3.5.5-1~deb13u2 || =3.6.0-1 || =3.6.0-2 || =3.6.0~~alpha1-1 || =3.6.0~~beta1-1 || =3.6.1-1 || =3.6.1-2 || =3.6.1-3 || >=0 <3.6.2-1 | 3.6.2-1 |
rpm rhel10 | | - | - |
rpm rhel9 | | - | - |
alpine v3.20 | | =1.1.1-r0 || =1.1.1-r1 || =1.1.1-r2 || =1.1.1-r3 || =1.1.1-r4 || =1.1.1-r5 || =1.1.1a-r0 || =1.1.1a-r1 || =1.1.1b-r0 || =1.1.1b-r1 || =1.1.1c-r0 || =1.1.1c-r1 || =1.1.1d-r1 || =1.1.1d-r2 || =1.1.1d-r3 || =1.1.1d-r4 || =1.1.1d-r5 || =1.1.1e-r0 || =1.1.1f-r0 || =1.1.1g-r0 || =1.1.1h-r0 || =1.1.1i-r0 || =1.1.1j-r0 || =1.1.1k-r0 || =1.1.1k-r1 || =1.1.1l-r0 || =3.0.0-r0 || =3.0.0-r1 || =3.0.0-r2 || =3.0.0-r3 || =3.0.0-r4 || =3.0.1-r0 || =3.0.1-r1 || =3.0.2-r0 || =3.0.3-r0 || =3.0.5-r0 || =3.0.5-r1 || =3.0.5-r2 || =3.0.5-r3 || =3.0.6-r0 || =3.0.7-r0 || =3.0.7-r1 || =3.0.7-r2 || =3.0.8-r0 || =3.0.8-r1 || =3.1.0-r0 || =3.1.0-r1 || =3.1.0-r2 || =3.1.0-r3 || =3.1.0-r4 || =3.1.0-r5 || =3.1.1-r0 || =3.1.1-r1 || =3.1.1-r2 || =3.1.1-r3 || =3.1.2-r0 || =3.1.3-r0 || =3.1.4-r0 || =3.1.4-r1 || =3.1.4-r2 || =3.1.4-r3 || =3.1.4-r4 || =3.1.4-r5 || =3.1.5-r5 || =3.2.1-r0 || =3.2.1-r1 || =3.2.1-r2 || =3.3.0-r0 || =3.3.0-r1 || =3.3.0-r2 || =3.3.0-r3 || =3.3.1-r0 || =3.3.1-r1 || =3.3.1-r2 || =3.3.1-r3 || =3.3.2-r0 || =3.3.2-r1 || =3.3.2-r2 || =3.3.3-r0 || =3.3.4-r0 || =3.3.5-r0 || =3.3.6-r0 || >=0 <3.3.7-r0 | 3.3.7-r0 |
alpine v3.21 | | =1.1.1-r0 || =1.1.1-r1 || =1.1.1-r2 || =1.1.1-r3 || =1.1.1-r4 || =1.1.1-r5 || =1.1.1a-r0 || =1.1.1a-r1 || =1.1.1b-r0 || =1.1.1b-r1 || =1.1.1c-r0 || =1.1.1c-r1 || =1.1.1d-r1 || =1.1.1d-r2 || =1.1.1d-r3 || =1.1.1d-r4 || =1.1.1d-r5 || =1.1.1e-r0 || =1.1.1f-r0 || =1.1.1g-r0 || =1.1.1h-r0 || =1.1.1i-r0 || =1.1.1j-r0 || =1.1.1k-r0 || =1.1.1k-r1 || =1.1.1l-r0 || =3.0.0-r0 || =3.0.0-r1 || =3.0.0-r2 || =3.0.0-r3 || =3.0.0-r4 || =3.0.1-r0 || =3.0.1-r1 || =3.0.2-r0 || =3.0.3-r0 || =3.0.5-r0 || =3.0.5-r1 || =3.0.5-r2 || =3.0.5-r3 || =3.0.6-r0 || =3.0.7-r0 || =3.0.7-r1 || =3.0.7-r2 || =3.0.8-r0 || =3.0.8-r1 || =3.1.0-r0 || =3.1.0-r1 || =3.1.0-r2 || =3.1.0-r3 || =3.1.0-r4 || =3.1.0-r5 || =3.1.1-r0 || =3.1.1-r1 || =3.1.1-r2 || =3.1.1-r3 || =3.1.2-r0 || =3.1.3-r0 || =3.1.4-r0 || =3.1.4-r1 || =3.1.4-r2 || =3.1.4-r3 || =3.1.4-r4 || =3.1.4-r5 || =3.1.5-r5 || =3.2.1-r0 || =3.2.1-r1 || =3.2.1-r2 || =3.3.0-r0 || =3.3.0-r1 || =3.3.0-r2 || =3.3.0-r3 || =3.3.1-r0 || =3.3.1-r1 || =3.3.1-r2 || =3.3.1-r3 || =3.3.2-r0 || =3.3.2-r1 || =3.3.2-r2 || =3.3.2-r3 || =3.3.2-r4 || =3.3.2-r5 || =3.3.2-r6 || =3.3.3-r0 || =3.3.4-r0 || =3.3.5-r0 || =3.3.6-r0 || >=0 <3.3.7-r0 | 3.3.7-r0 |
