Skip to content
OpenAdvisories
Critical USN-5488-1 1 CVE

openssl, openssl1.0 vulnerability

Published Jun 21, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the
c_rehash script. A local attacker could possibly use this issue to execute
arbitrary commands when c_rehash is run.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS openssl 1.1.1-1ubuntu2.1~18.04.19
Ubuntu · 18.04 LTS 18.04:LTS openssl1.0 1.0.2n-1ubuntu5.10
Ubuntu · 20.04 LTS 20.04:LTS openssl 1.1.1f-1ubuntu2.15
Ubuntu · 22.04 LTS 22.04:LTS openssl 3.0.2-0ubuntu1.5

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-2068 EPSS 96%

    The c_rehash script allows command injection

    In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2022-2068