Skip to content
OpenAdvisories
Critical DLA-3008-1 1 CVE

openssl - security update

Published May 14, 2022 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 openssl 1.1.0l-1~deb9u6

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…