Lucene search
RedHatRHSA-2022:1076HistoryMar 28, 2022 - 9:06 a.m.
(RHSA-2022:1076) Important: openssl security update
2022-03-2809:06:27
access.redhat.com
32
openssl
security update
bn_mod_sqrt
tls
ssl
cve-2022-0778
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.015
Percentile
87.3%
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
- openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | i686 | openssl-debuginfo | < 1.0.2k-10.el7_4 | openssl-debuginfo-1.0.2k-10.el7_4.i686.rpm |
| RedHat | 7 | i686 | openssl-static | < 1.0.2k-10.el7_4 | openssl-static-1.0.2k-10.el7_4.i686.rpm |
| RedHat | 7 | x86_64 | openssl-debuginfo | < 1.0.2k-10.el7_4 | openssl-debuginfo-1.0.2k-10.el7_4.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl-perl | < 1.0.2k-10.el7_4 | openssl-perl-1.0.2k-10.el7_4.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl | < 1.0.2k-10.el7_4 | openssl-1.0.2k-10.el7_4.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl-libs | < 1.0.2k-10.el7_4 | openssl-libs-1.0.2k-10.el7_4.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl-devel | < 1.0.2k-10.el7_4 | openssl-devel-1.0.2k-10.el7_4.x86_64.rpm |
| RedHat | 7 | i686 | openssl-devel | < 1.0.2k-10.el7_4 | openssl-devel-1.0.2k-10.el7_4.i686.rpm |
| RedHat | 7 | x86_64 | openssl-static | < 1.0.2k-10.el7_4 | openssl-static-1.0.2k-10.el7_4.x86_64.rpm |
| RedHat | 7 | i686 | openssl-libs | < 1.0.2k-10.el7_4 | openssl-libs-1.0.2k-10.el7_4.i686.rpm |
Related
nessus
nessus
SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2022:0859-1)
2022-03-16 00:00:00
SUSE SLES12 Security Update : openssl (SUSE-SU-2022:0854-1)
2022-03-16 00:00:00
Debian DLA-2953-1 : openssl1.0 - LTS security update
2022-03-17 00:00:00
oraclelinux
oraclelinux
openssl security update
2022-03-21 00:00:00
openssl security update
2022-03-29 00:00:00
openssl security update
2022-03-24 00:00:00
redhat
redhat
(RHSA-2022:1078) Important: openssl security update
2022-03-28 09:39:25
(RHSA-2022:1071) Important: openssl security update
2022-03-28 08:50:25
(RHSA-2022:1077) Important: openssl security update
2022-03-28 09:36:52
aix
aix
AIX is vulnerable to a denial of service due to OpenSSL
2022-05-13 09:32:08
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1n-alt1
2022-03-18 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1n-alt1
2022-03-24 00:00:00
github
github
osv
osv
CVE-2022-0778
2022-03-15 17:15:08
BIT-mariadb-2022-0778
2024-03-06 11:03:29
Low: compat-openssl10 security update
2022-06-30 00:00:00
ibm
ibm
redos
redos
ROS-20220318-02
2022-03-18 00:00:00
prion
prion
Code injection
2022-03-15 17:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-1176)
2023-01-12 00:00:00
Fedora: Security Advisory for openssl1.1 (FEDORA-2022-8bb51f6901)
2022-04-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:14916-1)
2022-03-16 00:00:00
githubexploit
githubexploit
Exploit for Infinite Loop in Openssl
2023-10-30 09:52:21
Exploit for Infinite Loop in Openssl
2022-04-21 04:04:27
Exploit for Infinite Loop in Openssl
2022-03-15 19:06:33
amazon
amazon
Important: openssl
2022-03-15 18:54:00
Important: openssl, openssl11
2022-03-15 18:49:00
ics
ics
Siemens OpenSSL Affected Industrial Products (Update E)
2023-01-13 12:00:00
fortinet
fortinet
Vulnerability in OpenSSL library
2021-08-18 00:00:00
Protect
2022-04-01 00:00:00
redhatcve
redhatcve
CVE-2022-0778
2022-03-15 17:45:49
ubuntu
ubuntu
OpenSSL vulnerability
2022-03-15 00:00:00
freebsd
freebsd
OpenSSL -- Infinite loop in BN_mod_sqrt parsing certificates
2022-03-15 00:00:00
rustsec
rustsec
Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
2022-03-15 12:00:00
cisa
cisa
OpenSSL Releases Security Updates
2022-03-17 00:00:00
f5
f5
K31323265 : OpenSSL vulnerability CVE-2022-0778
2022-03-22 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: openssl-1.1.1n-1.fc34
2022-04-03 01:08:23
[SECURITY] Fedora 36 Update: openssl1.1-1.1.1n-1.fc36
2022-04-05 00:17:58
[SECURITY] Fedora 35 Update: openssl-1.1.1n-1.fc35
2022-03-22 03:44:53
attackerkb
attackerkb
CVE-2022-0778
2022-03-15 00:00:00
cnvd
cnvd
OpenSSL has a denial of service vulnerability
2022-08-29 00:00:00
nodejsblog
nodejsblog
OpenSSL security releases require Node.js security releases
2022-03-18 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:03.openssl
2022-03-15 00:00:00
mariadbunix
mariadbunix
CVE-2022-0778
2022-03-15 17:15:08
nvd
nvd
CVE-2022-0778
2022-03-15 17:15:08
cbl_mariner
cbl_mariner
CVE-2022-0778 affecting package openssl 1.1.1k-16
2022-03-19 16:40:53
CVE-2022-0778 affecting package openssl for versions less than 1.1.1k-12
2022-04-09 06:51:56
arista
arista
Security Advisory 0075
2022-04-26 00:00:00
debiancve
debiancve
CVE-2022-0778
2022-03-15 17:15:08
slackware
slackware
[slackware-security] openssl
2022-03-17 19:59:07
hivepro
hivepro
OpenSSL exposed to Denial-of-service vulnerability causing Infinite Loop
2022-03-17 14:17:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Denial of Service (CVE-2022-0778)
2022-03-27 00:00:00
cloudfoundry
cloudfoundry
USN-5328-1: OpenSSL vulnerability | Cloud Foundry
2022-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2022-0778
2022-03-15 00:00:00
rocky
rocky
compat-openssl11 security and bug fix update
2022-06-02 21:13:31
alpinelinux
alpinelinux
CVE-2022-0778
2022-03-15 17:15:08
cve
cve
CVE-2022-0778
2022-03-15 17:15:08
openssl
openssl
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-0778
2022-03-17 20:51:13
debian
debian
[SECURITY] [DLA 2953-1] openssl1.0 security update
2022-03-17 09:50:32
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.015
Percentile
87.3%
Related for RHSA-2022:1076