VulnerabilityModified

CVE-2022-2068

HIGH 7.3EPSS 95.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 95.4%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).

CVSS 3.1: 7.3 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS: 95.40% probability · 100th percentile
CISA KEV: Not listed
Weakness: CWE-78
Affected: openssl/openssl · debian/debian linux · fedoraproject/fedora · siemens/sinec ins · netapp/element software · netapp/hci management node · netapp/ontap antivirus connector · netapp/ontap select deploy administration utility · netapp/santricity smi-s provider · netapp/smi-s provider · netapp/snapmanager · netapp/solidfire · netapp/bootstrap os · netapp/h615c firmware · netapp/h610s firmware · netapp/h610c firmware · netapp/h410c firmware · netapp/h300s firmware · netapp/h500s firmware · netapp/h700s firmware · +8 more
Source: openssl-security@openssl.org

References

https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdfThird Party Advisory
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfaPatch
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9Patch
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7Patch
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/Mailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220707-0008/Third Party Advisory
https://www.debian.org/security/2022/dsa-5169Third Party Advisory
https://www.openssl.org/news/secadv/20220621.txtVendor Advisory
http://seclists.org/fulldisclosure/2024/Nov/0
https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdfThird Party Advisory
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfaPatch
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9Patch
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7Patch
https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/Mailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20220707-0008/Third Party Advisory
https://www.debian.org/security/2022/dsa-5169Third Party Advisory
https://www.openssl.org/news/secadv/20220621.txtVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.