BDU%3A2022-02462 — Vulnetix

BDU%3A2022-02462 PUBLISHED CVSS 7.800000190734863 HIGH

Уязвимость функции tls_decrypt_ticket (ssl/t1_lib.c) библиотеки OpenSSL существует из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании

Risk Scores

CVSS 2.0

7.800000190734863

Affected Products

Vendor	Product	Versions
OpenSSL Software Foundation, Canonical Ltd., Red Hat Inc., Сообщество свободного программного обеспечения, Novell Inc.	OpenSSL, Ubuntu, Red Hat Enterprise Linux, Debian GNU/Linux, OpenSUSE Leap

Timeline

Apr 21, 2022 CVE Published
Mar 19, 2026 Distribution Patch
Mar 19, 2026 Distribution Patch
Mar 19, 2026 Distribution Patch

References

https://git.openssl.org/?p=openssl.git;a=commit;h=e97763c92c655dcf4af2860b3abd2bc4c8a267f9 url
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html url
http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html url
http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html url
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html url
http://www.securityfocus.com/bid/92628 url
http://www.splunk.com/view/SP-CAAAPUE url
http://www.splunk.com/view/SP-CAAAPSV url
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 url
https://bto.bluecoat.com/security-advisory/sa132 url
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 url
https://www.tenable.com/security/tns-2016-16 url
http://www-01.ibm.com/support/docview.wss?uid=swg21995039 url
https://www.openssl.org/news/vulnerabilities.html#y2017 url
http://www.securitytracker.com/id/1036885 url
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html url
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html url
https://www.tenable.com/security/tns-2016-21 url
https://www.tenable.com/security/tns-2016-20 url
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc url

…and 11 more

Open in Interactive Console →