CVE-2022-4304
Timing Oracle in RSA Decryption
A timing based side channel exists in the OpenSSL RSA Decryption implementationwhich could be sufficient to recover a plaintext across a network in aBleichenbacher style attack. To achieve a successful decryption an attackerwould have to be able to send a very large number of trial messages fordecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,RSA-OEAP and RSASVE.For example, in a TLS connection, RSA is commonly used by a client to send anencrypted pre-master secret to the server. An attacker that had observed agenuine connection between a client and a server could use this flaw to sendtrial messages to the server and record the time taken to process them. After asufficiently large number of messages the attacker could recover the pre-mastersecret used for the original connection and thus be able to decrypt theapplication data sent over that connection.
- Affected
- OpenSSL
- CVSS v3.1 NVD
- 5.9 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 23.51% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2023-02-08
- Updated
- 2026-10-14
Proof-of-concept exploits (1)
- Trinadh465/Openssl-1.1.1g_CVE-2022-43040★ · 2023-04-24