Read the docs
TI-2023-01188 Aliases CVE-2023-1255GHSA-4wp2-xw7p-2gfx

Input buffer over-read in AES-XTS implementation on 64 bit ARM

Priority LOW 28CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-125 and the CVSS impact.

Summary

Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform can crash in rare circumstances. The AES-XTS algorithm is usually used for disk encryption. The AES-XTS cipher decryption implementation for 64 bit ARM platform will read past the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16 byte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext buffer is unmapped, this will trigger a crash which results in a denial of service. If an attacker can control the size and location of the ciphertext buffer being decrypted by an application using AES-XTS on 64 bit ARM, the application is affected. This is fairly unlikely making this issue a Low severity one.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00953 61st percentileScored 2026-11-07
Fix Fixed OpenSSL (OpenSSL): 3.1.1, 3.0.9Red Hat: 1 advisory

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenSSLOpenSSL3.1.0 to before 3.1.1; 3.0.0 to before 3.0.93.1.1, 3.0.9Patch availableCNA
  • OpenSSL VendorOpenSSL Affected 3.1.0 to before 3.1.1; 3.0.0 to before 3.0.9 Fixed in 3.1.1, 3.0.9 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*3.0.0 to before 3.0.9; 3.1.0 to before 3.1.1VulnerableOpenSSL
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.0.9; 3.1.0 to before 3.1.1 Vulnerable ·OpenSSL

Remediation

  • Fix · CNA OpenSSL (OpenSSL) Fixed in 3.1.1, 3.0.9

Red Hat 1 advisory

  • RHSA-2023:3722 Released 2023-06-21 · Red Hat rating Moderate
    openssl security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.0.7-16.el9_2, openssl-perl-1:3.0.7-16.el9_2
    • Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.0.7-16.el9_2, openssl-libs-1:3.0.7-16.el9_2

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:3722
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:3722
Not affected: 7 products
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat JBoss Core Services
  • Red Hat JBoss Web Server 3
  • Red Hat JBoss Web Server 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1255
  2. 2026-10-03 Alias added: GHSA-4wp2-xw7p-2gfx

References

Patch 2

Advisory 1

Other 1

  • TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
  • TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
  • TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
  • TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
See all 312 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences