Lucene search
RedHatRHSA-2022:1078HistoryMar 28, 2022 - 9:39 a.m.
(RHSA-2022:1078) Important: openssl security update
2022-03-2809:39:25
access.redhat.com
53
openssl
security update
bn_mod_sqrt
certificates
cve-2022-0778
tls
cryptography
cvss
unix
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.015
Percentile
87.3%
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
- openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | ppc64le | openssl-static | < 1.0.2k-18.el7_6 | openssl-static-1.0.2k-18.el7_6.ppc64le.rpm |
| RedHat | 7 | ppc64le | openssl | < 1.0.2k-18.el7_6 | openssl-1.0.2k-18.el7_6.ppc64le.rpm |
| RedHat | 7 | ppc64le | openssl-debuginfo | < 1.0.2k-18.el7_6 | openssl-debuginfo-1.0.2k-18.el7_6.ppc64le.rpm |
| RedHat | 7 | i686 | openssl-libs | < 1.0.2k-18.el7_6 | openssl-libs-1.0.2k-18.el7_6.i686.rpm |
| RedHat | 7 | i686 | openssl-debuginfo | < 1.0.2k-18.el7_6 | openssl-debuginfo-1.0.2k-18.el7_6.i686.rpm |
| RedHat | 7 | x86_64 | openssl-perl | < 1.0.2k-18.el7_6 | openssl-perl-1.0.2k-18.el7_6.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl-debuginfo | < 1.0.2k-18.el7_6 | openssl-debuginfo-1.0.2k-18.el7_6.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl-static | < 1.0.2k-18.el7_6 | openssl-static-1.0.2k-18.el7_6.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl-devel | < 1.0.2k-18.el7_6 | openssl-devel-1.0.2k-18.el7_6.x86_64.rpm |
| RedHat | 7 | x86_64 | openssl | < 1.0.2k-18.el7_6 | openssl-1.0.2k-18.el7_6.x86_64.rpm |
Related
nessus
nessus
Photon OS 3.0: Nodejs PHSA-2022-3.0-0375
2024-07-24 00:00:00
CBL Mariner 2.0 Security Update: edk2 / openssl (CVE-2022-0778)
2024-08-30 00:00:00
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2022:0853-1)
2022-03-16 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-0778 affecting package edk2 for versions less than 20240223gitedc6681206c1-1
2024-07-22 23:01:50
CVE-2022-0778 affecting package openssl 1.1.1k-16
2022-03-19 16:40:53
CVE-2022-0778 affecting package openssl for versions less than 1.1.1k-12
2022-04-09 06:51:56
githubexploit
githubexploit
Exploit for Infinite Loop in Openssl
2022-03-15 19:06:33
Exploit for Infinite Loop in Openssl
2022-04-04 18:09:06
Exploit for Infinite Loop in Openssl
2023-09-11 07:30:33
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-0778
2022-03-17 20:51:13
debian
debian
[SECURITY] [DLA 2953-1] openssl1.0 security update
2022-03-17 09:50:32
redhat
redhat
(RHSA-2022:1065) Important: openssl security update
2022-03-28 07:46:07
(RHSA-2022:1066) Important: openssl security update
2022-03-28 08:37:05
(RHSA-2022:1520) Important: Red Hat JBoss Web Server 5.6.2 Security Update
2022-05-02 11:02:38
oraclelinux
oraclelinux
openssl security update
2022-03-28 00:00:00
openssl security update
2022-03-31 00:00:00
openssl security update
2022-03-30 00:00:00
centos
centos
openssl security update
2022-03-29 13:36:31
mageia
mageia
Updated openssl packages fix security vulnerability
2022-03-23 11:36:28
cloudfoundry
cloudfoundry
USN-5328-2: OpenSSL vulnerabilityUSN-5328-2: OpenSSL vulnerability | Cloud Foundry
2022-04-21 00:00:00
USN-5328-1: OpenSSL vulnerability | Cloud Foundry
2022-05-23 00:00:00
ibm
ibm
rocky
rocky
compat-openssl10 security update
2022-06-28 10:53:54
compat-openssl11 security and bug fix update
2022-06-02 21:13:31
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 16.14.2-alt1
2022-04-23 00:00:00
osv
osv
Important: openssl security update
2022-03-28 07:46:07
python310-ecdsa-0.18.0-1.1 on GA media
2024-06-15 00:00:00
BIT-node-2022-0778
2024-03-06 11:04:37
openvas
openvas
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-1155)
2023-01-12 00:00:00
Mageia: Security Advisory (MGASA-2022-0113)
2022-03-24 00:00:00
Fedora: Security Advisory for openssl (FEDORA-2022-9e88b5d8d7)
2022-04-04 00:00:00
hp
hp
openssl
openssl
checkpoint_security
checkpoint_security
suse
suse
Security update for openssl-1_0_0 (important)
2022-03-15 00:00:00
thn
thn
QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices
2022-03-31 03:23:00
veracode
veracode
Denial Of Service (DoS)
2022-03-16 09:55:55
fedora
fedora
[SECURITY] Fedora 34 Update: openssl-1.1.1n-1.fc34
2022-04-03 01:08:23
[SECURITY] Fedora 36 Update: openssl1.1-1.1.1n-1.fc36
2022-04-05 00:17:58
[SECURITY] Fedora 35 Update: openssl-1.1.1n-1.fc35
2022-03-22 03:44:53
attackerkb
attackerkb
CVE-2022-0778
2022-03-15 00:00:00
cnvd
cnvd
OpenSSL has a denial of service vulnerability
2022-08-29 00:00:00
nodejsblog
nodejsblog
OpenSSL security releases require Node.js security releases
2022-03-18 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:03.openssl
2022-03-15 00:00:00
mariadbunix
mariadbunix
CVE-2022-0778
2022-03-15 17:15:08
nvd
nvd
CVE-2022-0778
2022-03-15 17:15:08
fortinet
fortinet
Vulnerability in OpenSSL library
2021-08-18 00:00:00
Protect
2022-04-01 00:00:00
redhatcve
redhatcve
CVE-2022-0778
2022-03-15 17:45:49
ubuntu
ubuntu
OpenSSL vulnerability
2022-03-15 00:00:00
freebsd
freebsd
OpenSSL -- Infinite loop in BN_mod_sqrt parsing certificates
2022-03-15 00:00:00
rustsec
rustsec
Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
2022-03-15 12:00:00
cisa
cisa
OpenSSL Releases Security Updates
2022-03-17 00:00:00
f5
f5
K31323265 : OpenSSL vulnerability CVE-2022-0778
2022-03-22 00:00:00
arista
arista
Security Advisory 0075
2022-04-26 00:00:00
debiancve
debiancve
CVE-2022-0778
2022-03-15 17:15:08
amazon
amazon
Important: openssl, openssl11
2022-03-15 18:49:00
slackware
slackware
[slackware-security] openssl
2022-03-17 19:59:07
hivepro
hivepro
OpenSSL exposed to Denial-of-service vulnerability causing Infinite Loop
2022-03-17 14:17:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Denial of Service (CVE-2022-0778)
2022-03-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-0778
2022-03-15 00:00:00
alpinelinux
alpinelinux
CVE-2022-0778
2022-03-15 17:15:08
cve
cve
CVE-2022-0778
2022-03-15 17:15:08
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.015
Percentile
87.3%
Related for RHSA-2022:1078