VDB
DEBIAN-CVE-2022-1292
DEBIAN-CVE-2022-1292
PUBLISHED
CVSS 7.300000190734863 HIGH
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
Risk Scores
CVSS 3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | openssl | 0, 0, 0 |
| Debian:14 | openssl | 0, 0, 0 |
| Debian:11 | openssl | 0, 1.1.1, 1.1.1 |
| Debian:12 | openssl | 0, 0, 0 |
Exploit Intelligence
- Automation to validate the impact of the vulnerability CVE-2022-1292 on a specific system. (github-poc)
- OpenSSL (github-poc)
- CVE-2022-1292 OpenSSL c_rehash Vulnerability (github-poc)
- CVE-2022-1292 OpenSSL c_rehash Vulnerability - POC (github-poc)
- CVE-2022-1292 (github-poc)
- Rapport_149185019.html (github-poc)
- cve_db.json (github-poc)
- TestCommand.yaml (github-poc)
Timeline
- May 3, 2022 CVE Published
- Apr 28, 2026 CVE Updated