Lucene search
Veracode Vulnerability DatabaseVERACODE:36086HistoryJun 22, 2022 - 12:42 p.m.
Command Injection
2022-06-2212:42:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
0.093 Low
EPSS
Percentile
94.7%
openssl is vulnerable to command injection. The vulnerability exists in c_rehash script which allows an attacker to inject and execute malicious commands.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-2068
cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa
git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9
git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7
lists.fedoraproject.org/archives/list/[email protected]/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/
lists.fedoraproject.org/archives/list/[email protected]/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/
security.netapp.com/advisory/ntap-20220707-0008/
www.debian.org/security/2022/dsa-5169
www.openssl.org/news/secadv/20220621.txt
Related
osv
osv
openssl, openssl1.0 vulnerability
2022-06-21 14:36:21
heap buffer overflow in OpenSSL version 3.0.4
2022-06-28 02:20:38
heap buffer overflow in OpenSSL version 3.0.4
2022-06-28 02:20:38
ibm
ibm
ics
ics
Mitsubishi Electric GT SoftGOT2000
2022-11-15 12:00:00
debian
debian
[SECURITY] [DSA 5169-1] openssl security update
2022-06-26 18:26:57
openvas
openvas
Fedora: Security Advisory for openssl1.1 (FEDORA-2022-3b7d0abd0b)
2022-07-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2179-1)
2022-06-27 00:00:00
Ubuntu: Security Advisory (USN-5488-2)
2022-08-26 00:00:00
rocky
rocky
openssl security and bug fix update
2023-01-26 21:50:01
openssl security update
2022-08-02 07:00:02
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1q-alt1
2022-07-05 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1q-alt1
2022-07-08 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1p-alt1
2022-06-22 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0408
2022-06-22 00:00:00
Moderate Photon OS Security Update - PHSA-2022-0490
2022-06-23 00:00:00
Critical Photon OS Security Update - PHSA-2022-3.0-0408
2022-06-22 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-2068 affecting package openssl for versions less than 1.1.1k-17
2022-07-01 21:02:21
CVE-2022-2068 affecting package openssl 1.1.1k-16
2022-07-14 20:59:56
fedora
fedora
[SECURITY] Fedora 36 Update: openssl1.1-1.1.1p-1.fc36
2022-07-06 01:38:37
[SECURITY] Fedora 35 Update: openssl-1.1.1q-1.fc35
2022-07-23 02:27:30
nodejsblog
nodejsblog
OpenSSL update assessment, and Node.js project plans
2022-06-21 00:00:00
OpenSSL update assessment, and Node.js project plans
2022-06-21 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2022-07-06 00:00:00
OpenSSL vulnerability
2022-06-21 00:00:00
Node.js vulnerabilities
2023-10-30 00:00:00
cloudfoundry
cloudfoundry
USN-5488-1: OpenSSL vulnerability | Cloud Foundry
2022-07-28 00:00:00
freebsd
freebsd
OpenSSL -- Command injection vulnerability
2022-06-21 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2022-07-01 00:31:09
nessus
nessus
Amazon Linux AMI : openssl (ALAS-2022-1626)
2022-08-05 00:00:00
Amazon Linux 2 : openssl-snapsafe (ALASOPENSSL-SNAPSAFE-2023-001)
2023-09-27 00:00:00
OpenSSL 3.0.0 < 3.0.4 Vulnerability
2022-06-21 00:00:00
f5
f5
K21600298 : OpenSSL vulnerabilities CVE-2022-1292 and CVE-2022-2068
2022-08-05 00:00:00
cve
cve
CVE-2022-2068
2022-06-21 15:15:09
suse
suse
Security update for openssl-1_1 (moderate)
2022-09-01 00:00:00
Security update for openssl-1_1 (moderate)
2022-07-04 00:00:00
Security update for openssl-1_0_0 (moderate)
2022-07-07 00:00:00
ubuntucve
ubuntucve
CVE-2022-2068
2022-06-21 00:00:00
cloudlinux
cloudlinux
Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068
2022-07-14 16:53:26
redhatcve
redhatcve
CVE-2022-2068
2022-06-22 06:36:12
prion
prion
Command injection
2022-06-21 15:15:00
debiancve
debiancve
CVE-2022-2068
2022-06-21 15:15:09
cvelist
cvelist
CVE-2022-2068 The c_rehash script allows command injection
2022-06-21 00:00:00
amazon
amazon
Medium: openssl11
2022-07-28 21:55:00
Medium: openssl
2022-07-28 21:55:00
Medium: openssl
2022-07-28 20:38:00
nvd
nvd
CVE-2022-2068
2022-06-21 15:15:09
redhat
redhat
(RHSA-2022:8913) Moderate: Red Hat JBoss Web Server 5.7.1 release and security update
2022-12-12 12:28:19
(RHSA-2022:8917) Moderate: Red Hat JBoss Web Server 5.7.1 release and security update
2022-12-12 12:20:51
(RHSA-2022:5818) Moderate: openssl security update
2022-08-02 07:00:02
broadcom
broadcom
openssl
openssl
Vulnerability in OpenSSL CVE-2022-2068
2022-06-21 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 openssl
2022-06-28 19:28:45
[slackware-security] openssl
2022-06-23 05:32:23
alpinelinux
alpinelinux
CVE-2022-2068
2022-06-21 15:15:09
oraclelinux
oraclelinux
openssl security update
2022-08-02 00:00:00
openssl security update
2022-08-05 00:00:00
openssl security update
2022-08-31 00:00:00
almalinux
almalinux
Moderate: openssl security update
2022-08-03 00:00:00
Moderate: openssl security and bug fix update
2022-08-30 00:00:00
aix
aix
AIX is vulnerable to arbitrary command execution due to OpenSSL
2022-08-17 16:39:03
thn
thn