VDB
BIT-mariadb-min-2022-0778
BIT-mariadb-min-2022-0778
PUBLISHED
CVSS 8.699999809265137 HIGH
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | mariadb-min | 10.2.0, 10.3.0, 10.4.0 |
Exploit Intelligence
- jeongjunsoo/CVE-2022-0778 (github-poc-repo)
- jeongjunsoo/CVE-2022-0778 (github-poc)
- Trinadh465/openssl-1.1.1g_CVE-2022-0778 (github-poc)
- Proof of concept for CVE-2022-0778 in P12 and PEM format (github-poc)
- jkakavas/CVE-2022-0778-POC (github-poc)
- yywing/cve-2022-0778 (github-poc)
- Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt (github-poc)
- Rapport_149185019.html (github-poc)
- TestCommand.yaml (github-poc)
- macos_v2_generated.go (github-poc)
…and 2 more exploits
Timeline
- Jun 10, 2025 CVE Published
- Apr 17, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch
References
- http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html url
- http://seclists.org/fulldisclosure/2022/May/33 url
- http://seclists.org/fulldisclosure/2022/May/35 url
- http://seclists.org/fulldisclosure/2022/May/38 url
- https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65 url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83 url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246 url
- https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html url
- https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/ url
- https://nvd.nist.gov/vuln/detail/CVE-2022-0778 url
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002 url
- https://security.gentoo.org/glsa/202210-02 url
- https://security.netapp.com/advisory/ntap-20220321-0002/ url
- https://security.netapp.com/advisory/ntap-20220429-0005/ url
- https://security.netapp.com/advisory/ntap-20240621-0006/ url
- https://support.apple.com/kb/HT213255 url
…and 15 more