Lucene search
Redhat.comRH:CVE-2022-4304HistoryFeb 07, 2023 - 5:27 p.m.
CVE-2022-4304
2023-02-0717:27:55
redhat.com
access.redhat.com
78
0.002 Low
EPSS
Percentile
52.0%
A timing-based side channel exists in the OpenSSL RSA Decryption implementation, which could be sufficient to recover a ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, an attacker would have to be able to send a very large number of trial messages for decryption. This issue affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP, and RSASVE.
Related
nessus
nessus
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2023:2622-1)
2023-06-25 00:00:00
SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2023:2624-1)
2023-06-26 00:00:00
ubuntucve
ubuntucve
CVE-2022-4304
2023-02-07 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-4304 affecting package cloud-hypervisor 22.0-2
2024-05-17 09:07:12
CVE-2022-4304 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
CVE-2022-4304 affecting package openssl for versions less than 1.1.1k-21
2023-02-14 20:36:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2622-1)
2023-06-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2624-1)
2023-06-26 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2023:2633-1)
2024-03-04 00:00:00
ibm
ibm
osv
osv
Timing Oracle in RSA Decryption
2023-02-07 12:00:00
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
CVE-2022-4304
2023-02-08 20:15:23
cve
cve
CVE-2022-4304
2023-02-08 20:15:00
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
alpinelinux
alpinelinux
CVE-2022-4304
2023-02-08 20:15:00
debiancve
debiancve
CVE-2022-4304
2023-02-08 20:15:00
github
github
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
cvelist
cvelist
CVE-2022-4304 Timing Oracle in RSA Decryption
2023-02-08 19:04:28
cgr
cgr
CVE-2022-4304 vulnerabilities
2024-05-17 15:41:37
hackerone
hackerone
Internet Bug Bounty: OpenSSL vulnerable to the Marvin Attack (CVE-2022-4304)
2023-12-02 23:45:28
openssl
openssl
Vulnerability in OpenSSL CVE-2022-4304
2023-02-07 00:00:00
rustsec
rustsec
Timing Oracle in RSA Decryption
2023-02-07 12:00:00
f5
f5
K000132943 : OpenSSL vulnerability CVE-2022-4304
2023-03-13 00:00:00
veracode
veracode
Timing Attack
2023-02-10 13:05:03
ics
ics
Siemens OpenSSL RSA Decryption in SIMATIC
2023-08-10 12:00:00
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch
2023-10-05 12:00:00
Mitsubishi Electric Factory Automation Products
2024-01-04 12:00:00
githubexploit
githubexploit
Exploit for Observable Discrepancy in Openssl
2023-04-24 07:15:33
wolfi
wolfi
CVE-2022-4304 vulnerabilities
2024-05-17 16:29:45
redhat
redhat
(RHSA-2023:3408) Moderate: openssl security update
2023-05-31 18:25:53
(RHSA-2023:4128) Important: edk2 security update
2023-07-18 07:19:33
(RHSA-2023:1405) Important: openssl security update
2023-03-22 10:18:26
amazon
amazon
Important: openssl
2023-02-03 23:39:00
Important: openssl
2023-02-03 19:19:00
Important: openssl11
2023-02-03 19:19:00
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1
2023-02-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1
2023-02-20 00:00:00
almalinux
almalinux
Important: edk2 security update
2023-05-16 00:00:00
Important: openssl security update
2023-03-22 00:00:00
Important: edk2 security, bug fix, and enhancement update
2023-05-09 00:00:00
oraclelinux
oraclelinux
edk2 security update
2023-12-07 00:00:00
edk2 security update
2023-05-24 00:00:00
edk2 security update
2023-12-07 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in OpenSSL
2023-02-16 00:00:00
redos
redos
ROS-20230418-05
2023-04-18 00:00:00
rocky
rocky
openssl security update
2023-03-28 13:07:30
fedora
fedora
[SECURITY] Fedora 37 Update: edk2-20221117gitfff6d81270b5-13.fc37
2023-02-16 02:06:48
[SECURITY] Fedora 36 Update: edk2-20221117gitfff6d81270b5-14.fc36
2023-03-05 00:54:06
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:03.openssl
2023-02-16 00:00:00
slackware
slackware
[slackware-security] openssl
2023-02-07 20:57:57
debian
debian
[SECURITY] [DSA 5343-1] openssl security update
2023-02-07 21:05:48
[SECURITY] [DLA 3325-1] openssl security update
2023-02-20 11:11:44
ubuntu
ubuntu
Node.js vulnerabilities
2024-01-03 00:00:00