CVE-2022-1343: OCSP_basic_verify may incorrectly verify the response signing certificate
A flaw was found in OpenSSL's Online Certificate Status Protocol (OCSP) response functionality in the signer certificate verification routines. This flaw could result in a linked application falsely believing that an x.509 Digital Certificate is either "good" or "unknown" when revoked and requires that the application use a non-default configuration. This vulnerability leads to an issue with data integrity and confidentiality.
Other sources
The function OCSPbasicverify verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSPNOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of OCSPbasicverify will not use the OCSPNOCHECKS flag. In this case the OCSPbasicverify function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL "ocsp" application. When verifying an ocsp response with the "-nocertchecks" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/opensslto a version that resolves this vulnerability.Fixed in 1:3.0.1-41.el9_0 - Upgrade
Upgrade
debian/opensslto a version that resolves this vulnerability.Fixed in 1.1.1w-0+deb11u1Fixed in 1.1.1w-0+deb11u2Fixed in 3.0.15-1~deb12u1Fixed in 3.0.14-1~deb12u2Fixed in 3.5.0-1 - Upgrade
Upgrade
redhat/opensslto a version that resolves this vulnerability.Fixed in 3.0.3 - Upgrade
Upgrade
OpenSSLto a version that resolves this vulnerability.Fixed in 3.0.3 - Configuration
Do not verify OCSP responses with the command line "ocsp" option "-no_cert_checks" (which uses OCSP_NOCHECKS), because it can cause successful verification to be reported even when the response signing certificate verification fails.
OpenSSL ocsp command line application -no_cert_checks option (OCSP_NOCHECKS) = do not use
Event History
Frequently Asked Questions
What is the vulnerability ID of this flaw?
The vulnerability ID of this flaw is CVE-2022-1343.
What is the severity level of CVE-2022-1343?
CVE-2022-1343 has a severity level of medium.
How does the flaw in OpenSSL's OCSP response functionality impact the verification of signer certificates?
The flaw allows a successful verification even when the response signing certificate fails to verify, if the OCSP_NOCHECKS flag is used.
Which versions of OpenSSL are affected by CVE-2022-1343?
OpenSSL versions up to and excluding 3.0.3 are affected by this vulnerability.
Where can I find more information about CVE-2022-1343?
You can find more information about CVE-2022-1343 in the references provided: [link1], [link2], [link3]