5.9

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-65p9-r9h6-22vj

GHSA-65p9-r9h6-22vj: AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

Summary

AWS-LC is an open-source, general-purpose cryptographic library.

Impact

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis.

The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm.

Customers of AWS services do not need to take action. aws-lc-sys and aws-lc-fips-sys contain code from AWS-LC. Applications using aws-lc-sys or aws-lc-fips-sys should upgrade to the most recent releases of aws-lc-sys or aws-lc-fips-sys.

Impacted versions:

aws-lc-sys versions: >= 0.14.0, < 0.38.0
aws-lc-fips-sys versions: >= v0.13.0, < 0.13.12.

Patches

The patch is included in aws-lc-sys v.0.38.0 and aws-lc-fips-sys v0.13.12.

Workarounds

In the special cases of using AES-CCM with (M=4, L=2), (M=8, L=2), or (M=16, L=2), applications can workaround this issue by using AES-CCM through the EVP AEAD API using implementations EVP_aead_aes_128_ccm_bluetooth, EVP_aead_aes_128_ccm_bluetooth_8, and, EVP_aead_aes_128_ccm_matter respectively.

Otherwise, there is no workaround and applications using aws-lc-sys or aws-lc-fips-sys should upgrade to the most recent releases of aws-lc-sys or aws-lc-fips-sys.

Resources

If there are any questions or comments about this advisory, contact [AWS/Amazon] Security via thevulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.

Acknowledgement

AWS-LC would like to thank Joshua Rogers (https://joshua.hu/) for collaborating on this issue through the coordinated vulnerability disclosure process.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-65p9-r9h6-22vj

GHSA-65p9-r9h6-22vj:

5.9

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
aws-lc-sys	rust	>= 0.14.0, < 0.38.0	0.38.0
aws-lc-fips-sys	rust	>= 0.13.0, < 0.13.12	0.13.12

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a timing side-channel in the AES-CCM tag verification process within the AWS-LC library. The advisory points to EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm as the impacted implementations. By analyzing the commits between the last vulnerable version (v1.68.0) and the first patched version (v1.69.0) of aws/aws-lc, I identified a key commit (2ad9f3624f47787e71a1443435df310ed589f427) with the message "Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification". This commit modifies the cipher_aes_ccm_cipher function in crypto/fipsmodule/cipher/e_aesccm.c. The patch replaces the OPENSSL_memcmp function, which is not constant-time, with CRYPTO_memcmp, which is designed to be constant-time to prevent timing attacks. This change directly addresses the described vulnerability. Therefore, the cipher_aes_ccm_cipher function is the specific location of the vulnerable code, as it performs the insecure tag comparison.

Vulnerable functions

cipher_aes_ccm_cipher

crypto/fipsmodule/cipher/e_aesccm.c

The function `cipher_aes_ccm_cipher` in `crypto/fipsmodule/cipher/e_aesccm.c` is vulnerable to a timing side-channel attack. The vulnerability exists because the function uses `OPENSSL_memcmp` to compare the authentication tag. `OPENSSL_memcmp` is not a constant-time function, meaning its execution time can vary depending on the input data. This allows an attacker to determine the validity of the authentication tag by observing timing discrepancies, which can lead to the recovery of the tag. The patch replaces the non-constant-time `OPENSSL_memcmp` with the constant-time `CRYPTO_memcmp` to mitigate this vulnerability.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

5.9

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-65p9-r9h6-22vj: AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

Summary

Impact

Impacted versions:

Patches

Workarounds

Resources

Acknowledgement

GHSA-65p9-r9h6-22vj:

5.9

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

GHSA-65p9-r9h6-22vj: AWS-LC has Timing Side-Channel in AES-CCM Tag Verification

Summary

Impact

Impacted versions:

Patches

Workarounds

Resources

Acknowledgement

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

5.9

5.9

Technical Details

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI