Lucene search

CVE-2022-0778

🗓️ 15 Mar 2022 17:08:15Reported by [email protected]Type

The BN_mod_sqrt() function in OpenSSL versions 1.0.2, 1.1.1, and 3.0 contains a bug that can lead to an infinite loop, causing denial of service upon parsing certificates or private keys with invalid explicit elliptic curve parameters

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2022:0851-1)	16 Mar 202200:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2022:0859-1)	16 Mar 202200:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : openssl (SUSE-SU-2022:0854-1)	16 Mar 202200:00	–	nessus
Tenable Nessus	Debian DLA-2953-1 : openssl1.0 - LTS security update	17 Mar 202200:00	–	nessus
Tenable Nessus	Oracle Linux 7 : openssl (ELSA-2022-9224)	18 Mar 202200:00	–	nessus
Tenable Nessus	Oracle Linux 6 : openssl (ELSA-2022-9246)	24 Mar 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : openssl098e (EulerOS-SA-2022-1546)	25 Apr 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : openssl (EulerOS-SA-2022-1545)	25 Apr 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : aws-nitro-enclaves-acm, aws-nitro-enclaves-acm (ALASNITRO-ENCLAVES-2022-018)	11 May 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : openssl (EulerOS-SA-2022-1753)	26 May 202200:00	–	nessus

Nvd

Node

openssl opensslRange1.0.2–1.0.2zd

openssl opensslRange1.1.0–1.1.1n

openssl opensslRange3.0.0–3.0.2

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

netapp cloud_volumes_ontap_mediatorMatch-

netapp clustered_data_ontapMatch-

netapp clustered_data_ontap_antivirus_connectorMatch-

netapp santricity_smi-s_providerMatch-

netapp storagegridMatch-

Node

netapp a250_firmwareMatch-

AND

netapp a250Match-

Node

netapp 500f_firmwareMatch-

AND

netapp 500fMatch-

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch36

Node

tenable nessusRange<8.15.4

tenable nessusRange10.0.0–10.1.2

Node

mariadb mariadbRange10.2.0–10.2.42

mariadb mariadbRange10.3.0–10.3.33

mariadb mariadbRange10.4.0–10.4.23

mariadb mariadbRange10.5.0–10.5.14

mariadb mariadbRange10.6.0–10.6.6

mariadb mariadbRange10.7.0–10.7.2

Node

nodejs node.jsRange12.0.0–12.12.0-

nodejs node.jsRange12.13.0–12.22.11lts

nodejs node.jsRange14.0.0–14.14.0-

nodejs node.jsRange14.15.0–14.19.1lts

nodejs node.jsRange16.0.0–16.12.0-

nodejs node.jsRange16.13.0–16.14.2lts

nodejs node.jsRange17.0.0–17.7.2-

Source	Link
support	www.support.apple.com/kb/HT213256
git	www.git.openssl.org/gitweb/
support	www.support.apple.com/kb/HT213257
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
security	www.security.netapp.com/advisory/ntap-20240621-0006/
tenable	www.tenable.com/security/tns-2022-06
lists	www.lists.debian.org/debian-lts-announce/2022/03/msg00023.html
security	www.security.netapp.com/advisory/ntap-20220429-0005/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Mar 2022 17:15Current

CVSS25.0

CVSS37.5

EPSS0.021

CWE-835