Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based
\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive
\ncan write and cleanse more bytes than that query reports, causing an 8-byte
\nout-of-bounds heap write.<\/p>\n
Impact summary: An attacker who supplies a crafted CMS message can trigger a
\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it
\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial
\nof Service.<\/p>\n
CWE: CWE-787: Out-of-bounds Write<\/p>\n
Description: The key-wrap OID is potentially attacker-controlled on the wire.
\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.
\nAn attacker can take a legitimate message and change a single OID byte to
\nselect the padded variant while leaving the message otherwise valid. Since
\nthe unwrap key is derived from the recipient’s private operation (ECDH key
\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot
\npass, and the decryption fails with integrity failure.<\/p>\n
The write is a fixed-size (8-byte), fixed-value (zero) heap overflow
\nimmediately past the allocation, requires no special configuration, and is
\nreachable from the public CMS_decrypt() function. The consequence is
\na heap corruption leading to a Denial of Service. The fix in the CMS code
\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot
\nwrite past the allocation.<\/p>\n
FIPS impact: no<\/p>\n
As the CMS code lives outside the FIPS module boundary, no FIPS
\nmodules are affected by this CVE.<\/p>\n","protected":false},"excerpt":{"rendered":"
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based
\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive
\ncan write and cleanse more bytes than that quer<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11560","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}