USN-5502-1: OpenSSL vulnerability
Alex Chernyakhovsky discovered that OpenSSL incorrectly handled AES OCB mode when using the AES-NI assembly optimized implementation on 32-bit x86 platforms. A remote attacker could possibly use this issue to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this OpenSSL vulnerability?
The vulnerability ID for this OpenSSL vulnerability is CVE-2022-2097.
What is the severity of the OpenSSL vulnerability (CVE-2022-2097)?
The severity of the OpenSSL vulnerability (CVE-2022-2097) is not mentioned in the provided information.
How does the OpenSSL vulnerability (CVE-2022-2097) affect systems?
The OpenSSL vulnerability (CVE-2022-2097) could potentially allow a remote attacker to obtain sensitive information.
Which versions of Ubuntu are affected by the OpenSSL vulnerability (CVE-2022-2097)?
The following versions of Ubuntu are affected by the OpenSSL vulnerability (CVE-2022-2097): Ubuntu 22.04, Ubuntu 21.10, Ubuntu 20.04, and Ubuntu 18.04.
How can I fix the OpenSSL vulnerability (CVE-2022-2097)?
To fix the OpenSSL vulnerability (CVE-2022-2097), update the libssl package to the specified remedy version for your Ubuntu version.