Lucene search
OpenSSLOPENSSL:CVE-2022-1292HistoryMay 03, 2022 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2022-1292
2022-05-0300:00:00
www.openssl.org
245
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.106 Low
EPSS
Percentile
95.0%
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool.
Related
veracode
veracode
OS Command Injection
2022-05-11 10:47:23
nessus
nessus
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2022-1977)
2022-07-08 00:00:00
SUSE SLES12 Security Update : openssl (SUSE-SU-2022:2098-1)
2022-06-17 00:00:00
EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2022-2118)
2022-07-15 00:00:00
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2022-1292 affecting package openssl 1.1.1k-9
2022-05-26 19:04:39
CVE-2022-1292 affecting package openssl 1.1.1k-13
2022-06-03 17:54:02
fedora
fedora
[SECURITY] Fedora 35 Update: openssl-1.1.1o-1.fc35
2022-06-29 01:50:51
[SECURITY] Fedora 36 Update: openssl1.1-1.1.1o-1.fc36
2022-06-23 00:41:52
prion
prion
Command injection
2022-05-03 16:15:00
Command injection
2022-06-21 15:15:00
checkpoint_advisories
checkpoint_advisories
OpenSSL c_rehash Script Command Injection (CVE-2022-1292)
2022-11-14 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2022-05-12 13:24:45
debian
debian
[SECURITY] [DLA 3008-1] openssl security update
2022-05-15 02:10:14
[SECURITY] [DSA 5139-1] openssl security update
2022-05-17 19:10:59
amazon
amazon
Medium: openssl
2022-05-31 23:50:00
Medium: openssl
2022-06-30 23:38:00
Medium: openssl11
2022-07-06 03:14:00
githubexploit
githubexploit
Exploit for OS Command Injection in Openssl
2022-05-24 09:26:29
Exploit for OS Command Injection in Openssl
2022-05-25 07:06:48
Exploit for OS Command Injection in Openssl
2022-09-01 07:00:00
osv
osv
openssl - security update
2022-05-14 00:00:00
openssl - security update
2022-05-17 00:00:00
CVE-2022-1292
2022-05-03 16:15:18
alpinelinux
alpinelinux
CVE-2022-1292
2022-05-03 16:15:00
CVE-2022-2068
2022-06-21 15:15:00
redhatcve
redhatcve
CVE-2022-1292
2022-05-03 22:18:00
CVE-2022-2068
2022-06-22 06:36:12
cve
cve
CVE-2022-1292
2022-05-03 16:15:00
CVE-2022-2068
2022-06-21 15:15:00
ubuntucve
ubuntucve
CVE-2022-1292
2022-05-03 00:00:00
CVE-2022-2068
2022-06-21 00:00:00
slackware
slackware
[slackware-security] openssl
2022-05-04 21:32:34
[slackware-security] Slackware 14.2 openssl
2022-06-28 19:28:45
[slackware-security] openssl
2022-06-23 05:32:23
debiancve
debiancve
CVE-2022-1292
2022-05-03 16:15:00
CVE-2022-2068
2022-06-21 15:15:00
suse
suse
Security update for openssl-1_1 (moderate)
2022-07-04 00:00:00
Security update for openssl-1_0_0 (moderate)
2022-07-07 00:00:00
Security update for openssl-1_1 (moderate)
2022-09-01 00:00:00
ics
ics
Mitsubishi Electric Multiple Factory Automation Products (Update D)
2023-02-02 12:00:00
Mitsubishi Electric Multiple Factory Automation Products (Update C)
2022-11-02 12:00:00
Siemens Brownfield Connectivity Client
2023-02-16 12:00:00
cloudlinux
cloudlinux
Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068
2022-07-14 16:53:26
f5
f5
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0391
2022-05-06 00:00:00
Critical Photon OS Security Update - PHSA-2022-0185
2022-05-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1p-alt1
2022-06-22 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1p-alt1
2022-06-24 00:00:00
redhat
redhat
(RHSA-2022:8913) Moderate: Red Hat JBoss Web Server 5.7.1 release and security update
2022-12-12 12:28:19
(RHSA-2022:8917) Moderate: Red Hat JBoss Web Server 5.7.1 release and security update
2022-12-12 12:20:51
(RHSA-2022:5818) Moderate: openssl security update
2022-08-02 07:00:02
openssl
openssl
Vulnerability in OpenSSL CVE-2022-2068
2022-06-21 00:00:00
broadcom
broadcom
ubuntu
ubuntu
OpenSSL vulnerabilities
2022-05-26 00:00:00
OpenSSL vulnerabilities
2022-05-04 00:00:00
Node.js vulnerabilities
2023-10-30 00:00:00
aix
aix
AIX is vulnerable to arbitrary command execution due to OpenSSL
2022-08-17 16:39:03
oraclelinux
oraclelinux
openssl security update
2022-08-02 00:00:00
openssl security update
2022-08-05 00:00:00
openssl security and bug fix update
2022-08-30 00:00:00
almalinux
almalinux
Moderate: openssl security update
2022-08-03 00:00:00
Moderate: openssl security and bug fix update
2022-08-30 00:00:00
rocky
rocky
openssl security update
2022-08-02 07:00:02
nodejsblog
nodejsblog
OpenSSL update assessment, and Node.js project plans
2022-05-05 00:00:00
cloudfoundry
cloudfoundry
USN-5402-1: OpenSSL vulnerabilities | Cloud Foundry
2022-07-29 00:00:00
redos
redos
ROS-20220524-01
2022-05-24 00:00:00
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2022-05-03 00:00:00
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2022-10-16 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.106 Low
EPSS
Percentile
95.0%
Related for OPENSSL:CVE-2022-1292