CVE-2022-2097

MEDIUM

OpenSSL 1.1.1-1.1.1p and 3.0.0-3.0.4 - Data Exposure via AES OCB Mode on 32-bit x86 Platforms

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-2097. PoCs published by PeterThomasAwen.

AI-analyzed exploit summary This script automates the upgrade of OpenSSL to version 1.1.1q on Ubuntu systems. It downloads, compiles, and installs OpenSSL, then restarts nginx to apply changes.

Description

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).

Exploits (1)

nomisec WORKING POC
by PeterThomasAwen · poc
https://github.com/PeterThomasAwen/OpenSSLUpgrade1.1.1q-Ubuntu

This script automates the upgrade of OpenSSL to version 1.1.1q on Ubuntu systems. It downloads, compiles, and installs OpenSSL, then restarts nginx to apply changes.

Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: OpenSSL 1.1.1q on Ubuntu
Auth required
Prerequisites: sudo privileges · wget installed · nginx installed
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (13)

Core 13
Core References
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202210-02
Third Party Advisory vendor-advisory
https://www.debian.org/security/2023/dsa-5343
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html

Scores

CVSS v3 5.3
EPSS 0.0051
EPSS Percentile 66.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-327
Status published
Products (15)
crates.io/openssl-src 0 - 111.22.0crates.io
debian/debian_linux 10.0
debian/debian_linux 11.0
fedoraproject/fedora 35
fedoraproject/fedora 36
netapp/active_iq_unified_manager
netapp/clustered_data_ontap_antivirus_connector
netapp/h300s_firmware
netapp/h410c_firmware
netapp/h410s_firmware
... and 5 more
Published Jul 05, 2022
Tracked Since Feb 18, 2026