Поиск уязвимостей
Количество 28
Количество 28
BDU:2022-03181
Уязвимость реализации сценария c_rehash библиотеки OpenSSL, позволяющая нарушителю выполнять произвольные команды
ALT-PU-2022-2139
ALT-PU-2022-2139: package `openssl1.1` update to version 1.1.1p-alt1
ALT-PU-2022-2132
ALT-PU-2022-2132: package `openssl1.1` update to version 1.1.1p-alt1
ROS-20220524-01
Множественные уязвимости OpenSSL
CVE-2022-1292
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
CVE-2022-1292
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
CVE-2022-1292
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
CVE-2022-1292
CVE-2022-1292
The c_rehash script does not properly sanitise shell metacharacters to ...
ALT-PU-2023-8738
ALT-PU-2023-8738: package `mysql-workbench-community` update to version 8.0.32-alt1
SUSE-SU-2022:2106-1
Security update for openssl-1_0_0
SUSE-SU-2022:2098-1
Security update for openssl
SUSE-SU-2022:2075-1
Security update for openssl-1_1
SUSE-SU-2022:2068-1
Security update for openssl-1_1
GHSA-qjmp-vmxc-7p8r
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
SUSE-SU-2022:2321-1
Security update for openssl-1_0_0
SUSE-SU-2022:2251-1
Security update for openssl-1_1
SUSE-SU-2022:2197-1
Security update for openssl-1_0_0
SUSE-SU-2022:2182-1
Security update for openssl-1_1
ALT-PU-2022-3102
ALT-PU-2022-3102: package `MySQL` update to version 8.0.30-alt1.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-03181 Уязвимость реализации сценария c_rehash библиотеки OpenSSL, позволяющая нарушителю выполнять произвольные команды | CVSS3: 8.1 | 83% Высокий | больше 4 лет назад |
| ALT-PU-2022-2139 ALT-PU-2022-2139: package `openssl1.1` update to version 1.1.1p-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2022-2132 ALT-PU-2022-2132: package `openssl1.1` update to version 1.1.1p-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | ROS-20220524-01 Множественные уязвимости OpenSSL | больше 4 лет назад | ||
 | CVE-2022-1292 The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). | CVSS3: 7.3 | 83% Высокий | больше 4 лет назад |
 | CVE-2022-1292 The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). | CVSS3: 6.7 | 83% Высокий | больше 4 лет назад |
 | CVE-2022-1292 The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). | CVSS3: 7.3 | 83% Высокий | больше 4 лет назад |
 | CVSS3: 9.8 | 83% Высокий | больше 4 лет назад | |
| CVE-2022-1292 The c_rehash script does not properly sanitise shell metacharacters to ... | CVSS3: 7.3 | 83% Высокий | больше 4 лет назад |
| ALT-PU-2023-8738 ALT-PU-2023-8738: package `mysql-workbench-community` update to version 8.0.32-alt1 | CVSS3: 9.8 | почти 4 года назад | |
 | SUSE-SU-2022:2106-1 Security update for openssl-1_0_0 | 83% Высокий | больше 4 лет назад | |
| SUSE-SU-2022:2098-1 Security update for openssl | 83% Высокий | больше 4 лет назад | |
| SUSE-SU-2022:2075-1 Security update for openssl-1_1 | 83% Высокий | больше 4 лет назад | |
| SUSE-SU-2022:2068-1 Security update for openssl-1_1 | 83% Высокий | больше 4 лет назад | |
| GHSA-qjmp-vmxc-7p8r The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd). | CVSS3: 9.8 | 83% Высокий | больше 4 лет назад |
| SUSE-SU-2022:2321-1 Security update for openssl-1_0_0 | больше 4 лет назад | ||
| SUSE-SU-2022:2251-1 Security update for openssl-1_1 | больше 4 лет назад | ||
| SUSE-SU-2022:2197-1 Security update for openssl-1_0_0 | больше 4 лет назад | ||
| SUSE-SU-2022:2182-1 Security update for openssl-1_1 | больше 4 лет назад | ||
| ALT-PU-2022-3102 ALT-PU-2022-3102: package `MySQL` update to version 8.0.30-alt1.1 | CVSS3: 8.2 | почти 4 года назад |
Уязвимостей на страницу