Description
Issue summary: The AES-SIV cipher implementation contains a bug that causes
it to ignore empty associated data entries which are unauthenticated as
a consequence.
Impact summary: Applications that use the AES-SIV algorithm and want to
authenticate empty data entries as associated data can be misled by removing,
adding or reordering such empty entries as these are ignored by the OpenSSL
implementation. We are currently unaware of any such applications.
The AES-SIV algorithm allows for authentication of multiple associated
data entries along with the encryption. To authenticate empty data the
application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with
NULL pointer as the output buffer and 0 as the input buffer length.
The AES-SIV implementation in OpenSSL just returns success for such a call
instead of performing the associated data authentication operation.
The empty data thus will not be authenticated.
As this issue does not affect non-empty associated data authentication and
we expect it to be rare for an application to use empty associated data
entries this is qualified as Low severity issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 3.1.0 – < 3.1.2, 3.0.0 – < 3.0.10 | 3.1.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.0.10-1 | — |
| Debian 13 | openssl | 3.0.10-1 | — |
| Debian 12 | openssl | 3.0.10-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.12 | USN-6450-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.12+Fips1 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl | 3.0.2-0ubuntu1.12+Fips1 | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | openssl +3 | 1:3.0.7-27.el9 | RHSA-2024:2447 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | openssl +3 | 1:3.0.7-27.el9 | ALSA-2024:2447 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.8.1 | SUSE-SU-2023:3011-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.31.2 | SUSE-SU-2023:3013-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.1.1-3.1 | openSUSE-SU-2024:13065-1 |
| openSUSE Leap 15.5 | openssl-3 | 3.0.8-150500.5.8.1 | SUSE-SU-2023:3011-1 |
| openSUSE Leap 15.4 | openssl-3 | 3.0.8-150400.4.31.2 | SUSE-SU-2023:3013-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.1.1-r2 | — |
| Alpine v3.23 | openssl | 3.1.1-r2 | — |
| Alpine v3.22 | openssl | 3.1.1-r2 | — |
| Alpine v3.21 | openssl | 3.1.1-r2 | — |
| Alpine v3.20 | openssl | 3.1.1-r2 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openssl | 3.1.1-r2 | — |
| Alpine v3.18 | openssl | 3.1.1-r2 | — |
| Alpine v3.17 | openssl | 3.0.9-r2 | — |
| Alpine v3.16 | openssl3 | 3.0.9-r1 | — |
| Alpine v3.15 | openssl3 | 3.0.9-r1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +3 | 1:3.0.8-1.amzn2023.0.4 | ALAS2023-2023-306 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | hvloader | 1.0.1-6 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | openssl +3 | 1:3.0.7-27.0.3.el9 | ELSA-2024-2447 |
| Oracle Linux 9 | openssl-fips-provider | 3.0.7-2.0.1.el9 | ELSA-2024-2447 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl | 3.1.1-r2 | — |
Advisories 22
- ALSA-2024:2447 Low: openssl and openssl-fips-provider security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:2447 Red Hat Security Advisory: openssl and openssl-fips-provider security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- WID-SEC-2024-1226 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- USN-6450-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- WID-SEC-2023-1760 OpenSSL: Schwachstelle ermöglicht die Umgehung von Sicherheitsmaßnahmen. BSI CERT-Bund (WID) · Feb 10, 2026
- SUSE-SU-2023:3013-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13065-1 libopenssl-3-devel-3.1.1-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3011-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- ICSA-25-100-02 Siemens SIDIS Prime CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0106 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Apr 8, 2025
- SSA-277137 SSA-277137: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700 Siemens ProductCERT · Apr 8, 2025
- WID-SEC-2024-1307 Red Hat OpenShift Service Mesh Containers: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 5, 2025
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- SSA-915275 SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 Siemens ProductCERT · Nov 12, 2024
- ICSA-24-319-08 Siemens SINEC INS CISA ICS & IT advisories · Nov 12, 2024
- WID-SEC-2024-1591 Juniper JUNOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- ELSA-2024-2447 Low: openssl and openssl-fips-provider security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 3, 2024
- SSA-943925 SSA-943925: Multiple Vulnerabilities in SINEC NMS before V2.0 SP1 Siemens ProductCERT · Mar 12, 2024
- ICSA-24-046-15 Siemens SINEC NMS CISA ICS & IT advisories · Mar 12, 2024
- SSA-099606 SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 Siemens ProductCERT · Nov 14, 2023
- ICSA-23-320-13 Siemens SIMATIC MV500 CISA ICS & IT advisories · Nov 14, 2023
- ALAS2023-2023-306 Moderate: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 23, 2023
References
- OpenSSL Advisory vendor-advisory
- 3.1.2 git commit patch
- 3.0.10 git commit patch