{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/cloudlinux7els/vex/2022/cve-2022-2097-els_os-cloudlinux7els.json" } ], "tracking": { "current_release_date": "2026-06-12T22:42:27Z", "generator": { "date": "2026-06-12T22:42:27Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2022-2097-ELS_OS-CLOUDLINUX7ELS", "initial_release_date": "2022-07-05T11:15:00Z", "revision_history": [ { "date": "2022-07-05T11:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-06-12T22:42:27Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2022-2097" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CloudLinux 7", "product": { "name": "CloudLinux 7", "product_id": "CloudLinux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:cloudlinux:cloudlinux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "CloudLinux" }, { "branches": [ { "category": "product_version", "name": "openssl11-1:1.1.1k-7.el7.x86_64", "product": { "name": "openssl11-1:1.1.1k-7.el7.x86_64", "product_id": "openssl11-1:1.1.1k-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11@1.1.1k-7.el7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl11-devel-1:1.1.1k-7.el7.x86_64", "product": { "name": "openssl11-devel-1:1.1.1k-7.el7.x86_64", "product_id": "openssl11-devel-1:1.1.1k-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11-devel@1.1.1k-7.el7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl11-libs-1:1.1.1k-7.el7.x86_64", "product": { "name": "openssl11-libs-1:1.1.1k-7.el7.x86_64", "product_id": "openssl11-libs-1:1.1.1k-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11-libs@1.1.1k-7.el7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl11-static-1:1.1.1k-7.el7.x86_64", "product": { "name": "openssl11-static-1:1.1.1k-7.el7.x86_64", "product_id": "openssl11-static-1:1.1.1k-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11-static@1.1.1k-7.el7?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product": { "name": "openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_id": "openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11@1.1.1k-7.el7.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product": { "name": "openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_id": "openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11-devel@1.1.1k-7.el7.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product": { "name": "openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_id": "openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11-libs@1.1.1k-7.el7.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product": { "name": "openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_id": "openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/openssl11-static@1.1.1k-7.el7.tuxcare.els1?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64" }, "product_reference": "openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-1:1.1.1k-7.el7.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-1:1.1.1k-7.el7.x86_64" }, "product_reference": "openssl11-1:1.1.1k-7.el7.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64" }, "product_reference": "openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-devel-1:1.1.1k-7.el7.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.x86_64" }, "product_reference": "openssl11-devel-1:1.1.1k-7.el7.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64" }, "product_reference": "openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-libs-1:1.1.1k-7.el7.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.x86_64" }, "product_reference": "openssl11-libs-1:1.1.1k-7.el7.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64" }, "product_reference": "openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "relates_to_product_reference": "CloudLinux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl11-static-1:1.1.1k-7.el7.x86_64 as a component of CloudLinux 7", "product_id": "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.x86_64" }, "product_reference": "openssl11-static-1:1.1.1k-7.el7.x86_64", "relates_to_product_reference": "CloudLinux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-2097", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "notes": [ { "category": "description", "text": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "CloudLinux-7:openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-2097" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202210-02", "url": "https://security.gentoo.org/glsa/202210-02" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220715-0011/", "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230420-0008/", "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240621-0006/", "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5343", "url": "https://www.debian.org/security/2023/dsa-5343" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20220705.txt", "url": "https://www.openssl.org/news/secadv/20220705.txt" } ], "release_date": "2022-07-05T11:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-06-12T12:57:37.518020Z", "details": "This flaw only triggers on 32-bit x86 builds of OpenSSL that use the AES‑NI assembly path for AES‑OCB in versions 1.1.1–1.1.1p or 3.0.0–3.0.4; x86_64 and non‑AES‑NI/soft‑crypto paths are unaffected. Because OpenSSL does not support OCB cipher suites for TLS/DTLS, network-facing TLS services are unaffected; only applications that explicitly invoke the OCB EVP ciphers could, in specific cases (e.g., in‑place encryption), disclose at most 16 bytes with no integrity or availability impact. Given these strict preconditions and the small, bounded confidentiality exposure, this CVE is suitable to deprioritize in centrally managed enterprise VM/server environments.", "product_ids": [ "CloudLinux-7:openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CloudLinux-7:openssl11-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-devel-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-libs-1:1.1.1k-7.el7.x86_64", "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.tuxcare.els1.x86_64", "CloudLinux-7:openssl11-static-1:1.1.1k-7.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }