CVE-2022-4304

🗓️ 08 Feb 2023 19:04:28Reported by opensslType

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE

Reporter	Title	Published	Views	Family All 524
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1	20 Feb 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1	10 Feb 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities	7 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple OpenSSl denial of service vulnerabilities.	5 Jul 202320:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Access Appliance has multiple security vulnerabilities	14 Oct 202305:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2022-4304, CVE-2023-0215, CVE-2023-0286]	27 Sep 202411:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase	3 Oct 202314:09	–	ibm

NVD

Vulners

Node

openssl opensslRange1.0.2–1.0.2zg

openssl opensslRange1.1.1–1.1.1t

openssl opensslRange3.0.0–3.0.8

Node

stormshield endpoint_securityRange<7.2.40

stormshield sslvpnRange<3.2.1

stormshield stormshield_network_securityRange2.7.0–2.7.11

stormshield stormshield_network_securityRange2.8.0–3.7.34

stormshield stormshield_network_securityRange3.8.0–3.11.22

stormshield stormshield_network_securityRange4.0.0–4.3.16

stormshield stormshield_network_securityRange4.4.0–4.6.3

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.0.8",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.1t",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.0.2zg",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202402-08
openssl	www.openssl.org/news/secadv/20230207.txt
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003

04 Nov 2025 20:16Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.9

EPSS0.00224

SSVC

CWE-203