Skip to content
OpenAdvisories
High DLA-2952-1 2 CVEs

openssl - security update

Published Mar 17, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 openssl 1.1.0l-1~deb9u5

Vulnerabilities 2

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  • Unscored —
    CVE-2019-1551 EPSS 14%

    rsaz_512_sqr overflow bug on x86_64

    There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect wou…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine