CVE-2022-2068High· 7.3▾ MidnightPoC availableIn addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 40.2 · likelihood 19.3 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
95%
Exploit / PoC code exists
95% → 96%
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).
openssl >= 1.0.2, < 1.0.2zfopenssl >= 1.1.1, < 1.1.1popenssl >= 3.0.0, < 3.0.4debian_linux = 10.0debian_linux = 11.0fedora = 35fedora = 36sinec_ins < 1.0sinec_ins = 1.0element_softwarehci_management_nodeontap_antivirus_connectorontap_select_deploy_administration_utilitysantricity_smi-s_providersmi-s_providersnapmanagersolidfirebootstrap_osh615c_firmwareh610s_firmwareh610c_firmwareh410c_firmwareh300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwarefas_8300_firmwarefas_8700_firmwarefas_a400_firmwareaff_8300_firmwareaff_8700_firmwareaff_a400_firmwaresannavUpgrade past the affected range:
openssl 3.0.4sinec_ins 1.0Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-2097Medium· 5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances
CVE-2022-2274Critical· 9.8The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions
CVE-2023-0464High· 7.5A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints
CVE-2022-4304Medium· 5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack
CVE-2022-1292High· 7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection
CVE-2023-5678Medium· 5.3Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may ex…