Resource exhaustion in Diffie-Hellman key exchange - CVE-2022-40735

Vulnerability identifier: #VU77321

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-40735

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to usage of unnecessarily expensive calculations. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Diffie-Hellman key exchange
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
Basesystem Module
openSUSE Leap
Ubuntu
Guardium Data Security Center (GDSC)
IBM Automation Decision Services
libssl3 (Ubuntu package)
openssl (Ubuntu package)
libopenssl-3-devel
libopenssl3-debuginfo
libopenssl3
openssl-3-debuginfo
openssl-3
openssl-3-debugsource
libopenssl3-32bit
libopenssl3-32bit-debuginfo
libopenssl-3-devel-32bit
openssl-3-doc

Install updates from vendor's website.

Guardium Data Security Center (GDSC) - update to 3.6.1
IBM Automation Decision Services - update to 24.0.0.0.4
libssl3 (Ubuntu package) - update to 3.0.2-0ubuntu1.16
openssl (Ubuntu package) - update to 3.0.2-0ubuntu1.16
libopenssl-3-devel - update to 3.0.8-150400.4.26.1
libopenssl3-debuginfo - update to 3.0.8-150400.4.26.1
libopenssl3 - update to 3.0.8-150400.4.26.1
openssl-3-debuginfo - update to 3.0.8-150400.4.26.1
openssl-3 - update to 3.0.8-150400.4.26.1
openssl-3-debugsource - update to 3.0.8-150400.4.26.1
libopenssl3-32bit - update to 3.0.8-150400.4.26.1
libopenssl3-32bit-debuginfo - update to 3.0.8-150400.4.26.1
libopenssl-3-devel-32bit - update to 3.0.8-150400.4.26.1
openssl-3-doc - update to 3.0.8-150400.4.26.1

• https://github.com/mozilla/ssl-config-generator/issues/162
• https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdf
• https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf
• https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol/links/546c144f0cf20dedafd53e7e/Security-Issues-in-the-Diffie-Hellman-Key-Agreement-Protocol.pdf
• https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058b
• https://www.rfc-editor.org/rfc/rfc4419
• https://www.rfc-editor.org/rfc/rfc7919#section-5.2
• https://www.rfc-editor.org/rfc/rfc3526
• https://raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.json
• https://www.rfc-editor.org/rfc/rfc5114#section-4

• Denial of service in Diffie-Hellman Key Agreement Protocol
• SUSE update for openssl-3
• Ubuntu update for openssl
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in IBM Automation Decision Services
• Multiple vulnerabilities in IBM Automation Decision Services