Medium 5.3Published Jul 14, 2023

CVE-2023-2975Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence.

Updated under an hour ago (Nov 2, 2026, 1:40 AM ET)

Does this affect you?

It affects openssl and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for openssl Exploited in the last 30 days

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misled by removing, adding or reordering such empty entries as these are ignored by the OpenSSL implementation. We are currently unaware of any such applications. The AES-SIV algorithm allows for authentication of multiple associated data entries along with the encryption. To authenticate empty data the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL just returns success for such a call instead of performing the associated data authentication operation. The empty data thus will not be authenticated. As this issue does not affect non-empty associated data authentication and we expect it to be rare for an application to use empty associated data entries this is qualified as Low severity issue.

CVSS: 5.3 MEDIUM (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness (CWE): CWE-354, CWE-287
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 17, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

openssl openssl openssl:openssl	from 3.0.0 through 3.0.9; from 3.1.0 through 3.1.1	NVD
netapp management_services_for_element_software_and_netapp_hci netapp:management_services_for_element_software_and_netapp_hci	all versions	NVD
netapp ontap_select_deploy_administration_utility netapp:ontap_select_deploy_administration_utility	all versions	NVD

References

References

https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598	patch
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc	patch
https://www.openssl.org/news/secadv/20230714.txt	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/07/15/1
http://www.openwall.com/lists/oss-security/2023/07/19/5
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230725-0004/

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.