Skip to content
OpenAdvisories
High ELSA-2022-9224 1 CVE

Important: openssl security update (Oracle Linux 7)

Published Mar 18, 2022 · Updated Mar 18, 2022

Ecosystem: Oracle Linux

Summary

[1.0.2k-24.0.3]
- fix CVE-2022-0778 - possible infinite loop in BN_mod_sqrt()

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 openssl 1:1.0.2k-24.0.3.el7_9
Oracle Linux · 7 openssl-devel 1:1.0.2k-24.0.3.el7_9
Oracle Linux · 7 openssl-libs 1:1.0.2k-24.0.3.el7_9
Oracle Linux · 7 openssl-perl 1:1.0.2k-24.0.3.el7_9
Oracle Linux · 7 openssl-static 1:1.0.2k-24.0.3.el7_9

Vulnerabilities 1

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io