CVE-2022-2274

Name	CVE-2022-2274
Description	The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
Debian Bugs	1013441

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openssl (PTS)	buster	1.1.1n-0+deb10u1	fixed
	buster (security)	1.1.1n-0+deb10u3	fixed
	bullseye (security), bullseye	1.1.1n-0+deb11u3	fixed
	bookworm	3.0.4-2	fixed
	sid	3.0.5-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
openssl	source	buster	(not affected)
openssl	source	bullseye	(not affected)
openssl	source	(unstable)	3.0.4-2	1013441

Notes

[bullseye] - openssl <not-affected> (Vulnerable code not present)
[buster] - openssl <not-affected> (Vulnerable code not present)
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4d8a88c134df634ba610ff8db1eb8478ac5fd345
https://github.com/openssl/openssl/issues/18625
https://www.openssl.org/news/secadv/20220705.txt