CVE-2023-6129

一、漏洞信息
 漏洞编号：[CVE-2023-6129](https://nvd.nist.gov/vuln/detail/CVE-2023-6129)
 漏洞归属组件：[compat-openssl11](https://gitee.com/src-openeuler/compat-openssl11)
 漏洞归属的版本：1.1.1m
 CVSS V3.0分值：
  BaseScore：6.5 Medium
  Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
 漏洞简述：
  Issue summary: The POLY1305 MAC (message authentication code) implementationcontains a bug that might corrupt the internal state of applications runningon PowerPC CPU based platforms if the CPU provides vector instructions.Impact summary: If an attacker can influence whether the POLY1305 MACalgorithm is used, the application state might be corrupted with variousapplication dependent consequences.The POLY1305 MAC (message authentication code) implementation in OpenSSL forPowerPC CPUs restores the contents of vector registers in a different orderthan they are saved. Thus the contents of some of these vector registersare corrupted when returning to the caller. The vulnerable code is used onlyon newer PowerPC processors supporting the PowerISA 2.07 instructions.The consequences of this kind of internal application state corruption canbe various - from no consequences, if the calling application does notdepend on the contents of non-volatile XMM registers at all, to the worstconsequences, where the attacker could get complete control of the applicationprocess. However unless the compiler uses the vector registers for storingpointers, the most likely consequence, if any, would be an incorrect resultof some application dependent calculations or a crash leading to a denial ofservice.The POLY1305 MAC algorithm is most frequently used as part of theCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)algorithm. The most common usage of this AEAD cipher is with TLS protocolversions 1.2 and 1.3. If this cipher is enabled on the server a maliciousclient can influence whether this AEAD cipher is used. This implies thatTLS server applications using OpenSSL can be potentially impacted. Howeverwe are currently not aware of any concrete application that would be affectedby this issue therefore we consider this a Low severity security issue.
 漏洞公开时间：2024-01-10 01:15:12
 漏洞创建时间：2025-01-22 08:05:14
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2023-6129
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| openssl-security.openssl.org | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  |
| openssl-security.openssl.org | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  |
| openssl-security.openssl.org | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  |
| openssl-security.openssl.org | https://www.openssl.org/news/secadv/20240109.txt |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-6129 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://seclists.org/oss-sec/2024/q1/15 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://www.openssl.org/news/secadv/20240109.txt | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-6129 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | http://www.openwall.com/lists/oss-security/2024/01/09/1 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 | https://bugzilla.suse.com/show_bug.cgi?id=1218690 |
| redhat_bugzilla | http://www.openwall.com/lists/oss-security/2024/01/09/1 | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 |
| redhat_bugzilla | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 |
| redhat_bugzilla | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 |
| redhat_bugzilla | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 |
| redhat_bugzilla | https://www.openssl.org/news/secadv/20240109.txt | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 |
| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:2447 | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2023-6129 |
| oracle |  | https://www.oracle.com/security-alerts/cpuapr2024.html |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2023-6129 |
| cve_search |  | https://www.openssl.org/news/secadv/20240109.txt |
| cve_search |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |
| cve_search |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |
| cve_search |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |
| mageia |  | http://advisories.mageia.org/MGASA-2024-0020.html |
| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-6129 | https://explore.alas.aws.amazon.com/CVE-2023-6129.html |
| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6129 | https://explore.alas.aws.amazon.com/CVE-2023-6129.html |
| snyk | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://security.snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 |
| snyk | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://security.snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 |
| snyk | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://security.snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 |
| snyk | https://github.com/pyca/cryptography/commit/89d0d56fb104ac4e0e6db63d78fc22b8c53d27e9 | https://security.snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 |
| snyk | https://www.openssl.org/news/secadv/20240109.txt | https://security.snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 | https://security.snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 |
| snyk | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-6149520 |
| snyk | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-6149520 |
| snyk | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-6149520 |
| snyk | https://github.com/pyca/cryptography/commit/89d0d56fb104ac4e0e6db63d78fc22b8c53d27e9 | https://security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-6149520 |
| snyk | https://www.openssl.org/news/secadv/20240109.txt | https://security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-6149520 |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 | https://security.snyk.io/vuln/SNYK-PYTHON-PYOPENSSL-6149520 |
| snyk | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://security.snyk.io/vuln/SNYK-RUST-OPENSSLSRC-6149519 |
| snyk | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://security.snyk.io/vuln/SNYK-RUST-OPENSSLSRC-6149519 |
| snyk | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://security.snyk.io/vuln/SNYK-RUST-OPENSSLSRC-6149519 |
| snyk | https://github.com/pyca/cryptography/commit/89d0d56fb104ac4e0e6db63d78fc22b8c53d27e9 | https://security.snyk.io/vuln/SNYK-RUST-OPENSSLSRC-6149519 |
| snyk | https://www.openssl.org/news/secadv/20240109.txt | https://security.snyk.io/vuln/SNYK-RUST-OPENSSLSRC-6149519 |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 | https://security.snyk.io/vuln/SNYK-RUST-OPENSSLSRC-6149519 |
| snyk | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://security.snyk.io/vuln/SNYK-RUBY-OPENSSL-6149517 |
| snyk | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://security.snyk.io/vuln/SNYK-RUBY-OPENSSL-6149517 |
| snyk | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://security.snyk.io/vuln/SNYK-RUBY-OPENSSL-6149517 |
| snyk | https://github.com/pyca/cryptography/commit/89d0d56fb104ac4e0e6db63d78fc22b8c53d27e9 | https://security.snyk.io/vuln/SNYK-RUBY-OPENSSL-6149517 |
| snyk | https://www.openssl.org/news/secadv/20240109.txt | https://security.snyk.io/vuln/SNYK-RUBY-OPENSSL-6149517 |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 | https://security.snyk.io/vuln/SNYK-RUBY-OPENSSL-6149517 |
| snyk | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://security.snyk.io/vuln/SNYK-UNMANAGED-OPENSSL-6149450 |
| snyk | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://security.snyk.io/vuln/SNYK-UNMANAGED-OPENSSL-6149450 |
| snyk | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://security.snyk.io/vuln/SNYK-UNMANAGED-OPENSSL-6149450 |
| snyk | https://github.com/pyca/cryptography/commit/89d0d56fb104ac4e0e6db63d78fc22b8c53d27e9 | https://security.snyk.io/vuln/SNYK-UNMANAGED-OPENSSL-6149450 |
| snyk | https://www.openssl.org/news/secadv/20240109.txt | https://security.snyk.io/vuln/SNYK-UNMANAGED-OPENSSL-6149450 |
| snyk | https://bugzilla.redhat.com/show_bug.cgi?id=2257571 | https://security.snyk.io/vuln/SNYK-UNMANAGED-OPENSSL-6149450 |
| alpine | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 | https://security.alpinelinux.org/vuln/CVE-2023-6129 |
| alpine | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 | https://security.alpinelinux.org/vuln/CVE-2023-6129 |
| alpine | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 | https://security.alpinelinux.org/vuln/CVE-2023-6129 |
| alpine | https://www.openssl.org/news/secadv/20240109.txt | https://security.alpinelinux.org/vuln/CVE-2023-6129 |
| alpine | http://www.openwall.com/lists/oss-security/2024/01/09/1 | https://security.alpinelinux.org/vuln/CVE-2023-6129 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  | openssl-security.openssl.org |
|  |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  | openssl-security.openssl.org |
|  |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  | openssl-security.openssl.org |
|  |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  | suse_bugzilla |
|  |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  | suse_bugzilla |
|  |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  | suse_bugzilla |
|  |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  | redhat_bugzilla |
|  |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  | redhat_bugzilla |
|  |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  | redhat_bugzilla |
|  |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  | snyk |
|  |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  | snyk |
|  |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  | snyk |
|  |  | https://github.com/pyca/cryptography/commit/89d0d56fb104ac4e0e6db63d78fc22b8c53d27e9 |  | snyk |
|  |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  | alpine |
|  |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  | alpine |
|  |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  | alpine |
|  |  | https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35 |  | nvd |
|  |  | https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04 |  | nvd |
|  |  | https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015 |  | nvd |
|  |  | https://www.openssl.org/news/secadv/20240109.txt |  | nvd |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  poly1305 Mac（消息身份验证代码）实现如果CPU提供向量指令，则可能会损坏基于runnonon powerpc cpu的内部状态的错误。
 openEuler评分：
  6.5
 Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
 受影响版本排查(受影响/不受影响)：
  1.master(1.1.1m):不受影响
2.openEuler-20.03-LTS-SP4:不受影响
3.openEuler-22.03-LTS-SP3:不受影响
4.openEuler-22.03-LTS-SP4:不受影响
5.openEuler-24.03-LTS(1.1.1m):不受影响
6.openEuler-24.03-LTS-Next(1.1.1m):不受影响
7.openEuler-24.03-LTS-SP1(1.1.1m):不受影响

修复是否涉及abi变化(是/否)：
  1.master(1.1.1m):否
2.openEuler-20.03-LTS-SP4:否
3.openEuler-22.03-LTS-SP3:否
4.openEuler-22.03-LTS-SP4:否
5.openEuler-24.03-LTS(1.1.1m):否
6.openEuler-24.03-LTS-Next(1.1.1m):否
7.openEuler-24.03-LTS-SP1(1.1.1m):否

原因说明：
  1.master(1.1.1m):不受影响-漏洞代码不存在
2.openEuler-20.03-LTS-SP4:不受影响-漏洞代码不存在
3.openEuler-22.03-LTS-SP3:不受影响-漏洞代码不存在
4.openEuler-22.03-LTS-SP4:不受影响-漏洞代码不存在
5.openEuler-24.03-LTS(1.1.1m):不受影响-漏洞代码不存在
6.openEuler-24.03-LTS-Next(1.1.1m):不受影响-漏洞代码不存在
7.openEuler-24.03-LTS-SP1(1.1.1m):不受影响-漏洞代码不存在

src-openEuler/compat-openssl11
Closed

Content Risk Flag

Comments (5)

src-openEuler/compat-openssl11Closed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2023-6129

Comments (5)

Search

src-openEuler/compat-openssl11
Closed