CVE-2022-1343: OCSP_basic_verify may incorrectly verify the response signing certificate
A flaw was found in OpenSSL's Online Certificate Status Protocol (OCSP) response functionality in the signer certificate verification routines. This flaw could result in a linked application falsely believing that an x.509 Digital Certificate is either "good" or "unknown" when revoked and requires that the application use a non-default configuration. This vulnerability leads to an issue with data integrity and confidentiality.
Other sources
Node.js doesn't call OCSPbasicverify with the custom flag OCSPNOCHECKS. Node.js is not affected.
— Node.Js
The function OCSPbasicverify verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSPNOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of OCSPbasicverify will not use the OCSPNOCHECKS flag. In this case the OCSPbasicverify function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL "ocsp" application. When verifying an ocsp response with the "-nocertchecks" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/opensslto a version that resolves this vulnerability.Fixed in 1:3.0.1-41.el9_0 - Upgrade
Upgrade
debian/opensslto a version that resolves this vulnerability.Fixed in 1.1.1w-0+deb11u1Fixed in 1.1.1w-0+deb11u2Fixed in 3.0.15-1~deb12u1Fixed in 3.0.14-1~deb12u2Fixed in 3.5.0-1 - Upgrade
Upgrade
redhat/opensslto a version that resolves this vulnerability.Fixed in 3.0.3 - Upgrade
Upgrade
OpenSSLto a version that resolves this vulnerability.Fixed in 3.0.3
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID of this flaw?
The vulnerability ID of this flaw is CVE-2022-1343.
What is the severity level of CVE-2022-1343?
CVE-2022-1343 has a severity level of medium.
How does the flaw in OpenSSL's OCSP response functionality impact the verification of signer certificates?
The flaw allows a successful verification even when the response signing certificate fails to verify, if the OCSP_NOCHECKS flag is used.
Which versions of OpenSSL are affected by CVE-2022-1343?
OpenSSL versions up to and excluding 3.0.3 are affected by this vulnerability.
Where can I find more information about CVE-2022-1343?
You can find more information about CVE-2022-1343 in the references provided: [link1], [link2], [link3]