Lucene search
GoogleOSV:ALSA-2022:5326HistoryJun 30, 2022 - 12:00 a.m.
Low: compat-openssl10 security update
2022-06-3000:00:00
Google
osv.dev
10
openssl
security update
infinite loop
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
9
Confidence
High
EPSS
0.015
Percentile
87.3%
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. compat-openssl10 provides the legacy 1.0 version of OpenSSL for use with older binaries.
Security Fix(es):
- compat-openssl10: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
osv
osv
CGA-388r-r649-wqc9
2024-06-06 12:21:49
libopenssl-3-devel-3.0.2-1.1 on GA media
2024-06-15 00:00:00
Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
2022-03-15 12:00:00
nessus
nessus
Photon OS 3.0: Nxtgn PHSA-2022-3.0-0373
2024-07-24 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : OpenSSL vulnerability (USN-5328-1)
2022-03-15 00:00:00
OpenSSL 1.0.2 < 1.0.2zd Vulnerability
2022-03-16 00:00:00
debiancve
debiancve
CVE-2022-0778
2022-03-15 17:15:08
amazon
amazon
Important: openssl, openssl11
2022-03-15 18:49:00
slackware
slackware
[slackware-security] openssl
2022-03-17 19:59:07
hivepro
hivepro
OpenSSL exposed to Denial-of-service vulnerability causing Infinite Loop
2022-03-17 14:17:00
oraclelinux
oraclelinux
openssl security update
2022-03-18 00:00:00
openssl security update
2022-03-18 00:00:00
openssl security update
2022-03-23 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Denial of Service (CVE-2022-0778)
2022-03-27 00:00:00
redhat
redhat
(RHSA-2022:1073) Important: openssl security update
2022-03-28 08:56:18
(RHSA-2022:1519) Important: Red Hat JBoss Web Server 5.6.2 Security Update
2022-05-02 11:02:22
(RHSA-2022:1076) Important: openssl security update
2022-03-28 09:06:27
fortinet
fortinet
Protect
2022-04-01 00:00:00
Vulnerability in OpenSSL library
2021-08-18 00:00:00
ibm
ibm
cloudfoundry
cloudfoundry
USN-5328-1: OpenSSL vulnerability | Cloud Foundry
2022-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2022-0778
2022-03-15 00:00:00
rocky
rocky
compat-openssl11 security and bug fix update
2022-06-02 21:13:31
openssl security update
2022-03-28 07:46:07
alpinelinux
alpinelinux
CVE-2022-0778
2022-03-15 17:15:08
cbl_mariner
cbl_mariner
CVE-2022-0778 affecting package openssl for versions less than 1.1.1k-12
2022-04-09 06:51:56
CVE-2022-0778 affecting package openssl 1.1.1k-16
2022-03-19 16:40:53
openvas
openvas
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2023-1068)
2023-01-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0854-1)
2022-03-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:14915-1)
2022-03-16 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: openssl-1.1.1n-1.fc35
2022-03-22 03:44:53
[SECURITY] Fedora 36 Update: openssl1.1-1.1.1n-1.fc36
2022-04-05 00:17:58
[SECURITY] Fedora 34 Update: openssl-1.1.1n-1.fc34
2022-04-03 01:08:23
cve
cve
CVE-2022-0778
2022-03-15 17:15:08
altlinux
altlinux
Security fix for the ALT Linux 10 package mysql-connector-odbc version 8.0.29-alt1
2022-07-06 00:00:00
Security fix for the ALT Linux 10 package node version 14.19.1-alt1
2022-04-29 00:00:00
attackerkb
attackerkb
CVE-2022-0778
2022-03-15 00:00:00
cnvd
cnvd
OpenSSL has a denial of service vulnerability
2022-08-29 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:03.openssl
2022-03-15 00:00:00
nvd
nvd
CVE-2022-0778
2022-03-15 17:15:08
redhatcve
redhatcve
CVE-2022-0778
2022-03-15 17:45:49
ubuntu
ubuntu
OpenSSL vulnerability
2022-03-15 00:00:00
OpenSSL vulnerability
2022-03-15 00:00:00
freebsd
freebsd
OpenSSL -- Infinite loop in BN_mod_sqrt parsing certificates
2022-03-15 00:00:00
rustsec
rustsec
Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
2022-03-15 12:00:00
f5
f5
K31323265 : OpenSSL vulnerability CVE-2022-0778
2022-03-22 00:00:00
arista
arista
Security Advisory 0075
2022-04-26 00:00:00
cisa
cisa
OpenSSL Releases Security Updates
2022-03-17 00:00:00
mariadbunix
mariadbunix
CVE-2022-0778
2022-03-15 17:15:08
nodejsblog
nodejsblog
OpenSSL security releases require Node.js security releases
2022-03-18 00:00:00
githubexploit
githubexploit
Exploit for Infinite Loop in Openssl
2022-04-21 04:04:27
Exploit for Infinite Loop in Openssl
2022-04-18 07:51:18
Exploit for Infinite Loop in Openssl
2023-09-12 05:16:27
photon
photon
Important Photon OS Security Update - PHSA-2022-0162
2022-03-16 00:00:00
almalinux
almalinux
Important: openssl security update
2022-03-28 07:46:07
Low: compat-openssl10 security update
2022-06-30 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2022-0778
2022-07-03 22:15:24
cvelist
cvelist
paloalto
paloalto
Impact of the OpenSSL Infinite Loop Vulnerability CVE-2022-0778
2022-03-31 02:30:00
openssl
openssl
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-0778
2022-03-17 20:51:13
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
9
Confidence
High
EPSS
0.015
Percentile
87.3%
Related for OSV:ALSA-2022:5326