Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:39186
HistoryFeb 09, 2023 - 5:36 p.m.

Denial Of Service (DoS)

2023-02-0917:36:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
openssl
vulnerability
pem_read_bio_ex()
dos
software
double free
buffer
crash
attacker
exploit

0.001 Low

EPSS

Percentile

47.0%

JSON

openssl is vulnerable to Denial Of Service (DoS). The vulnerability exists in the PEM_read_bio_ex() because if the caller also frees this buffer then a double free will occur which will most likely lead to a crash where it can be exploited by an attacker who has the ability to supply malicious PEM files for parsing.

Related

osv 10
cbl_mariner 7
cve 1
ibm 26
openvas 37
alpinelinux 1
openssl 1
prion 1
debiancve 1
nessus 62
github 1
rustsec 1
f5 1
wolfi 1
redhatcve 1
cvelist 1
githubexploit 1
nvd 1
cgr 1
ubuntucve 1
ics 5
redhat 10
oraclelinux 10
altlinux 2
freebsd 1
redos 1
fedora 2
rocky 1
freebsd_advisory 1
almalinux 3
amazon 1
slackware 1
debian 2
ubuntu 1
photon 1
osv
osv
CVE-2022-4450
2023-02-08 20:15:23
openssl-src contains Double free after calling `PEM_read_bio_ex`
2023-02-08 22:22:58
Double free after calling `PEM_read_bio_ex`
2023-02-07 12:00:00
cbl_mariner
cbl_mariner
CVE-2022-4450 affecting package openssl 1.1.1k-16
2023-02-14 02:35:59
CVE-2022-4450 affecting package rust 1.59.0-1
2024-06-29 09:08:28
CVE-2022-4450 affecting package cloud-hypervisor 22.0-2
2024-06-29 09:08:28
cve
cve
CVE-2022-4450
2023-02-08 20:15:23
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to [CVE-2022-4450]
2023-04-28 11:51:49
Security Bulletin: IBM Sterling Connect:Express for UNIX is vulnerable to denial of service due to OpenSSL (CVE-2022-4450)
2023-03-27 11:17:06
Security Bulletin: IBM Workload Scheduler is potentially affected by a vulnerability in OpenSSL causing system crash (CVE-2022-4450)
2023-06-13 13:08:57
openvas
openvas
OpenSSL 1.1.1 < 1.1.1t, 3.0 < 3.0.8 DoS Vulnerability - Linux
2023-02-08 00:00:00
OpenSSL 1.1.1 < 1.1.1t, 3.0 < 3.0.8 DoS Vulnerability - Windows
2023-02-08 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-2127)
2023-06-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-4450
2023-02-08 20:15:23
openssl
openssl
Vulnerability in OpenSSL CVE-2022-4450
2023-02-07 00:00:00
prion
prion
Double free
2023-02-08 20:15:00
debiancve
debiancve
CVE-2022-4450
2023-02-08 20:15:23
nessus
nessus
Siemens SCALANCE W1750D Devices Double Free (CVE-2022-4450)
2023-12-19 00:00:00
RHEL 8 : openssl (RHSA-2023:3408)
2023-05-31 00:00:00
Slackware Linux 15.0 / current openssl Multiple Vulnerabilities (SSA:2023-038-01)
2023-02-07 00:00:00
github
github
openssl-src contains Double free after calling `PEM_read_bio_ex`
2023-02-08 22:22:58
rustsec
rustsec
Double free after calling `PEM_read_bio_ex`
2023-02-07 12:00:00
f5
f5
K000132635 : OpenSSL vulnerability CVE-2022-4450
2023-02-16 00:00:00
wolfi
wolfi
CVE-2022-4450 vulnerabilities
2024-06-29 09:08:33
redhatcve
redhatcve
CVE-2022-4450
2023-02-07 17:28:05
cvelist
cvelist
CVE-2022-4450 Double free after calling PEM_read_bio_ex
2023-02-08 19:04:04
githubexploit
githubexploit
Exploit for Double Free in Openssl
2023-04-24 05:55:40
nvd
nvd
CVE-2022-4450
2023-02-08 20:15:23
cgr
cgr
CVE-2022-4450 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2022-4450
2023-02-07 00:00:00
ics
ics
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch (Update A)
2024-06-04 12:00:00
Mitsubishi Electric Factory Automation Products
2024-01-04 12:00:00
Siemens SCALANCE W1750D Devices
2023-03-16 12:00:00
redhat
redhat
(RHSA-2023:3408) Moderate: openssl security update
2023-05-31 18:25:53
(RHSA-2023:1405) Important: openssl security update
2023-03-22 10:18:26
(RHSA-2023:3420) Important: Red Hat JBoss Web Server 5.7.3 release and security update
2023-06-05 13:52:35
oraclelinux
oraclelinux
edk2 security update
2023-12-07 00:00:00
edk2 security update
2023-05-24 00:00:00
openssl security update
2023-03-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1
2023-02-20 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1
2023-02-10 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in OpenSSL
2023-02-16 00:00:00
redos
redos
ROS-20230418-05
2023-04-18 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: edk2-20221117gitfff6d81270b5-13.fc37
2023-02-16 02:06:48
[SECURITY] Fedora 36 Update: edk2-20221117gitfff6d81270b5-14.fc36
2023-03-05 00:54:06
rocky
rocky
openssl security update
2023-03-28 13:07:30
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:03.openssl
2023-02-16 00:00:00
almalinux
almalinux
Important: openssl security update
2023-03-22 00:00:00
Important: edk2 security update
2023-05-16 00:00:00
Important: edk2 security, bug fix, and enhancement update
2023-05-09 00:00:00
amazon
amazon
Important: openssl11
2023-02-03 19:19:00
slackware
slackware
[slackware-security] openssl
2023-02-07 20:57:57
debian
debian
[SECURITY] [DLA 3325-1] openssl security update
2023-02-20 11:11:21
[SECURITY] [DSA 5343-1] openssl security update
2023-02-07 21:05:48
ubuntu
ubuntu
Node.js vulnerabilities
2024-01-03 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0530
2023-02-10 00:00:00

0.001 Low

EPSS

Percentile

47.0%

JSON
Related for VERACODE:39186
osv10cbl_mariner7cve1ibm26openvas37alpinelinux1openssl1prion1debiancve1nessus62github1rustsec1f51wolfi1redhatcve1cvelist1githubexploit1nvd1cgr1ubuntucve1ics5redhat10oraclelinux10altlinux2freebsd1redos1fedora2rocky1freebsd_advisory1almalinux3amazon1slackware1debian2ubuntu1photon1