CVE-2023-2975

Advisory lineage Upstream: 0 Downstream: 10
Modified
Published: 14 Jul 2023, 11:16
Last modified:23 Apr 2025, 16:20

Vulnerability Summary

Overall Risk (default)
low
21/100
CVSS Score
5.3 MEDIUM
v3.1 (cve.org)
EPSS Score
0.2% LOW
0% probability +0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Jul 2023, 11:16
Published
Vulnerability first disclosed
23 Apr 2025, 16:20
Last Modified
Vulnerability information updated

Description

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misled by removing, adding or reordering such empty entries as these are ignored by the OpenSSL implementation. We are currently unaware of any such applications. The AES-SIV algorithm allows for authentication of multiple associated data entries along with the encryption. To authenticate empty data the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL just returns success for such a call instead of performing the associated data authentication operation. The empty data thus will not be authenticated. As this issue does not affect non-empty associated data authentication and we expect it to be rare for an application to use empty associated data entries this is qualified as Low severity issue.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Trends

Current EPSS score: 0.20%• Percentile: 42%

Techniques & Countermeasures

  • CWE-354•Improper Validation of Integrity Check Value

    The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

  • CWE-287•Improper Authentication

    When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Systems

  • netapp•management_services_for_element_software_and_netapp_hci

    na

  • netapp•ontap_select_deploy_administration_utility

    na

  • Unknown•OpenSSL

    ≥ 3.1.0, < 3.1.2 | ≥ 3.0.0, < 3.0.10 | ≥ 3.0.0, ≤ 3.0.9 | ≥ 3.1.0, ≤ 3.1.1

References (7)