Test ID:	1.3.6.1.4.1.25623.1.0.114253
Category:	General
Title:	OpenSSL Vector Register Corruption Vulnerability (20240109)
Summary:	OpenSSL is prone to a vector register corruption; vulnerability.
Description:	Summary: OpenSSL is prone to a vector register corruption vulnerability. Vulnerability Insight: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Vulnerability Impact: If an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. Affected Software/OS: OpenSSL versions 3.0, 3.1 and 3.2 on PowerPC CPU based platforms if the CPU provides vector instructions. Solution: Update to version 3.0.13, 3.1.5, 3.2.1 or later. CVSS Score: 6.1 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-6129 3.0.13 git commit https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 3.1.5 git commit https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 3.2.1 git commit https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 OpenSSL Advisory https://www.openssl.org/news/secadv/20240109.txt http://www.openwall.com/lists/oss-security/2024/03/11/1
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.