Skip to content
OpenAdvisories
High DSA-5103-1 2 CVEs

openssl - security update

Published Mar 15, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 openssl 1.1.1d-0+deb10u8
Debian · 11 openssl 1.1.1k-1+deb11u2

Vulnerabilities 2

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  • Unscored —
    CVE-2021-4160

    BN_mod_exp may produce incorrect results on MIPS

    There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and i…

    OpenSSL OpenSSL openssl edk2 Debian Ubuntu Azure Linux