CVE-2022-2274

🗓️ 01 Jul 2022 07:30:17Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 191 Views

OpenSSL 3.0.4 introduces serious RSA bug for X86_64 CPUs with AVX512IFMA causing memory corruption and potential remote code execution

Reporter	Title	Published	Views	Family All 67
GithubExploit	Exploit for Out-of-bounds Write in Openssl	21 Feb 202301:56	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Openssl	24 Sep 202221:30	–	githubexploit
ATTACKERKB	CVE-2022-2274	9 Jun 202200:00	–	attackerkb
AlpineLinux	CVE-2022-2274	1 Jul 202207:30	–	alpinelinux
Circl	CVE-2022-2274	1 Jul 202212:39	–	circl
CNNVD	OpenSSL 缓冲区错误漏洞	1 Jul 202200:00	–	cnnvd
CNVD	OpenSSL RSA Component Remote Code Execution Vulnerability	5 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-2274 RSA implementation bug in AVX512IFMA instructions	1 Jul 202207:30	–	cvelist
Debian CVE	CVE-2022-2274	1 Jul 202207:30	–	debiancve
Oracle linux	edk2 security update	24 Apr 202400:00	–	oraclelinux

NVD

Vulners

Node

openssl opensslMatch3.0.4

Node

netapp snapcenterMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

[
  {
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "status": "affected",
        "version": "Affects OpenSSL 3.0.4"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20220715-0010/
github	www.github.com/openssl/openssl/issues/18625
openssl	www.openssl.org/news/secadv/20220705.txt
git	www.git.openssl.org/gitweb/

21 Nov 2024 07:00Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

EPSS0.39689

CWE-787