VDB
GHSA-q9wj-f4qw-6vfj
GHSA-q9wj-f4qw-6vfj
PUBLISHED
CVSS 7.400000095367432 HIGH
Read buffer overruns processing ASN.1 strings
Record from GitHub Advisory Database · Published May 24, 2022
openssl-src is fixed in 111.16.0 (crates.io)
Read buffer overruns processing ASN.1 strings
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| openssl-src | crates.io | 111.16.0 |
Risk scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | openssl-src | 0 |
Timeline
- May 24, 2022 CVE Published
- Apr 9, 2026 Distribution Patch
- Apr 9, 2026 Security Advisory (4 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-q9wj-f4qw-6vfj
vulnetix vdb fixes GHSA-q9wj-f4qw-6vfjOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-q9wj-f4qw-6vfj/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-3712 advisory
- https://rustsec.org/advisories/RUSTSEC-2021-0098.html url
- https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E url
- https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E url
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf url
- https://www.tenable.com/security/tns-2022-02 url
- https://www.oracle.com/security-alerts/cpuapr2022.html url
- https://security.netapp.com/advisory/ntap-20240621-0006 url
- https://kc.mcafee.com/corporate/index?page=content&id=SB10366 url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12 url
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11 url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11 url
- https://www.tenable.com/security/tns-2021-16 url
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12 url
- http://www.openwall.com/lists/oss-security/2021/08/26/2 url
- https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html url
- https://www.oracle.com/security-alerts/cpujan2022.html url
- https://www.openwall.com/lists/oss-security/2021/08/26/2 url
- https://www.openssl.org/news/secadv/20210824.txt url
…and 12 more