Skip to content
OpenAdvisories
High USN-5328-2 1 CVE

openssl vulnerability

Published Mar 15, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-5328-1 fixed a vulnerability in OpenSSL. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Tavis Ormandy discovered that OpenSSL incorrectly parsed certain
certificates. A remote attacker could possibly use this issue to cause
OpenSSH to stop responding, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS openssl 1.0.1f-1ubuntu2.27+esm5
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS openssl 1.0.2g-1ubuntu4.20+esm2

Vulnerabilities 1

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io

References

  • report
    https://ubuntu.com/security/CVE-2022-0778