CVE-2022-1473: Incomplete Cleanup

🗓️ 03 May 2022 00:00:00Reported by Rapid7Type

rapid7🔗 www.rapid7.com👁 3 Views

DoS in OpenSSL 3.0.0-3.0.2 via memory leak in OPENSSL_LH_flush() during decoding.

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to multiple openSSL vulnerabilities in Node.js (CVE-2022-1434, CVE-2022-1343, CVE-2022-1473)	4 Jul 202213:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities [CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473]	12 Jul 202311:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	8 Jul 202217:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to issues in OpenSSL (CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473 )	1 Feb 202315:37	–	ibm
Tenable Nessus	Amazon Linux 2022 : openssl (ALAS2022-2022-104)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : openssl, openssl-devel, openssl-libs (ALAS2022-2022-195)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2023-051)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : openssl (ALSA-2022:6224)	16 Nov 202200:00	–	nessus
Tenable Nessus	CentOS 9 : openssl-3.0.7-18.el9	26 Apr 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-1473
cwe	www.cwe.mitre.org/data/definitions/459.html
cwe	www.cwe.mitre.org/data/definitions/459.html

05 May 2025 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.5

CVSS 25

EPSS0.02524

SSVC

CWE-459 CWE-459

OpenSSL OPENSSL_LH_flush DoS memory leak certificate decoding