CVE catalog
CVE-2022-2068
openssl: CVE-2022-2068
- Severity
- Critical · CVSS 9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 96.39% · Oct 25, 2026
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u2 | fixed |
| Cpe | openssl | Not reported | 3.0.4 | fixed |
| Cpe | debian_linux | Not reported | Not reported | unknown |
| Cpe | fedora | Not reported | Not reported | unknown |
| Cpe | sinec_ins | Not reported | Not reported | unknown |
| Cpe | element_software | Not reported | Not reported | unknown |
| Cpe | hci_management_node | Not reported | Not reported | unknown |
| Cpe | ontap_antivirus_connector | Not reported | Not reported | unknown |
| Cpe | ontap_select_deploy_administration_utility | Not reported | Not reported | unknown |
| Cpe | santricity_smi-s_provider | Not reported | Not reported | unknown |
| Cpe | smi-s_provider | Not reported | Not reported | unknown |
| Cpe | snapmanager | Not reported | Not reported | unknown |
| Cpe | solidfire | Not reported | Not reported | unknown |
| Cpe | bootstrap_os | Not reported | Not reported | unknown |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.fips.2.8 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.fips.7.1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20150106.5c2d456b-2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160104.c2a892d7-1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160408.ffea0a2c-2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160408.ffea0a2c-2ubuntu0.1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160408.ffea0a2c-2ubuntu0.2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160408.ffea0a2c-2ubuntu0.2+esm1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160408.ffea0a2c-2ubuntu0.2+esm3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20160408.ffea0a2c-2ubuntu0.2+esm4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2n-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.5 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.6 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.7 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.8 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.9 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.10 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.15 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.17 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.19 | fixed |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu2 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu3 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu4 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.1 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.2 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.3 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.4 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.5 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.6 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.7 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.8 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.9 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.10 | fixed |
| Ubuntu | openssl | 20.04 | 1.1.1c-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu6 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.5 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.8 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.9 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.10 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.11 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.12 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.13 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.15 | fixed |
| Ubuntu | nodejs | 22.04 | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.1 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | fixed |
| Ubuntu | openssl | pro | 1.0.2d-0ubuntu1 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2d-0ubuntu2 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2e-1ubuntu1 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2f-2ubuntu1 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu2 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu3 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.1 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.2 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.4 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.5 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.6 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.8 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.9 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.10 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.11 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.12 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.13 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.14 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.15 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.16 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.17 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.18 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.19 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.20 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.20+esm1 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.20+esm2 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.20+esm3 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.20+esm4 | vulnerable |
| Ubuntu | openssl | pro | 1.0.2g-1ubuntu4.20+esm5 | fixed |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2n-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.5 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.6 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.7 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.8 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.9 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.10 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.15 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.17 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.19 | fixed |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu2 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu3 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu4 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.1 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.2 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.3 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.4 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.5 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.6 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.7 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.8 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.9 | vulnerable |
| Ubuntu | openssl1.0 | 18.04 | 1.0.2n-1ubuntu5.10 | fixed |
| Ubuntu | openssl | 20.04 | 1.1.1c-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu6 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.5 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.8 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.9 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.10 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.11 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.12 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.13 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.15 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | fixed |
| Suse | openssl | hpe helion openstack 8 | 1.0.2j-60.83.1 | fixed |
| Suse | openssl | openstack cloud 8 | 1.0.2j-60.83.1 | fixed |
| Suse | openssl | openstack cloud crowbar 8 | 1.0.2j-60.83.1 | fixed |
| Suse | openssl | linux enterprise server for sap applications 12 sp3 | 1.0.2j-60.83.1 | fixed |
| Suse | openssl | linux enterprise server 12 sp2-bcl | 1.0.2j-60.83.1 | fixed |
| Suse | openssl | linux enterprise server 12 sp3-ltss | 1.0.2j-60.83.1 | fixed |
| Suse | openssl | linux enterprise server 12 sp3-bcl | 1.0.2j-60.83.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15-espos | 1.1.0i-150000.4.74.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15-ltss | 1.1.0i-150000.4.74.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15-ltss | 1.1.0i-150000.4.74.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 | 1.1.0i-150000.4.74.1 | fixed |
| Suse | openssl-1_0_0 | openstack cloud 9 | 1.0.2p-3.56.1 | fixed |
| Suse | openssl-1_0_0 | openstack cloud crowbar 9 | 1.0.2p-3.56.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 12 sp4 | 1.0.2p-3.56.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise software development kit 12 sp5 | 1.0.2p-3.56.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp4-ltss | 1.0.2p-3.56.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp5 | 1.0.2p-3.56.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 12 sp5 | 1.0.2p-3.56.1 | fixed |
| Opensuse | openssl-1_1 | tumbleweed | 1.1.1p-1.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp1-espos | 1.1.0i-150100.14.33.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp1-ltss | 1.1.0i-150100.14.33.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp1-bcl | 1.1.0i-150100.14.33.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp1-ltss | 1.1.0i-150100.14.33.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp1 | 1.1.0i-150100.14.33.1 | fixed |
| Suse | openssl-1_1 | enterprise storage 6 | 1.1.0i-150100.14.33.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.0.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.0.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.0.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.4-1 | not yet assigned | Not reported | Not reported |
| Cpe | openssl | cpe | Not reported | 3.0.4 | Not reported | NVD-CVE-2022-2068 | Not reported |
| Ubuntu | openssl | deb | 18.04 | 1.1.1-1ubuntu2.1~18.04.19 | Not reported | UBUNTU-CVE-2022-2068 | Not reported |
| Ubuntu | openssl1.0 | deb | 18.04 | 1.0.2n-1ubuntu5.10 | Not reported | UBUNTU-CVE-2022-2068 | Not reported |
| Ubuntu | openssl | deb | 20.04 | 1.1.1f-1ubuntu2.15 | Not reported | UBUNTU-CVE-2022-2068 | Not reported |
| Ubuntu | nodejs | deb | 22.04 | 12.22.9~dfsg-1ubuntu3.1 | Not reported | UBUNTU-CVE-2022-2068 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.5 | Not reported | UBUNTU-CVE-2022-2068 | Not reported |
| Ubuntu | openssl | deb | pro | 1.0.2g-1ubuntu4.20+esm5 | Not reported | USN-5488-2 | Not reported |
| Ubuntu | openssl | deb | 18.04 | 1.1.1-1ubuntu2.1~18.04.19 | Not reported | USN-5488-1 | Not reported |
| Ubuntu | openssl1.0 | deb | 18.04 | 1.0.2n-1ubuntu5.10 | Not reported | USN-5488-1 | Not reported |
| Ubuntu | openssl | deb | 20.04 | 1.1.1f-1ubuntu2.15 | Not reported | USN-5488-1 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.5 | Not reported | USN-5488-1 | Not reported |
| Suse | openssl | rpm | hpe helion openstack 8 | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl | rpm | openstack cloud 8 | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl | rpm | openstack cloud crowbar 8 | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server for sap applications 12 sp3 | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server 12 sp2-bcl | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server 12 sp3-ltss | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server 12 sp3-bcl | 1.0.2j-60.83.1 | Not reported | SUSE-SU-2022:2180-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15-espos | 1.1.0i-150000.4.74.1 | Not reported | SUSE-SU-2022:2309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15-ltss | 1.1.0i-150000.4.74.1 | Not reported | SUSE-SU-2022:2309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15-ltss | 1.1.0i-150000.4.74.1 | Not reported | SUSE-SU-2022:2309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 | 1.1.0i-150000.4.74.1 | Not reported | SUSE-SU-2022:2309-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | openstack cloud 9 | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | openstack cloud crowbar 9 | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 12 sp4 | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise software development kit 12 sp5 | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp4-ltss | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp5 | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 12 sp5 | 1.0.2p-3.56.1 | Not reported | SUSE-SU-2022:2181-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | tumbleweed | 1.1.1p-1.1 | Not reported | OPENSUSE-SU-2024:12159-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp1-espos | 1.1.0i-150100.14.33.1 | Not reported | SUSE-SU-2022:2179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp1-ltss | 1.1.0i-150100.14.33.1 | Not reported | SUSE-SU-2022:2179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp1-bcl | 1.1.0i-150100.14.33.1 | Not reported | SUSE-SU-2022:2179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp1-ltss | 1.1.0i-150100.14.33.1 | Not reported | SUSE-SU-2022:2179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp1 | 1.1.0i-150100.14.33.1 | Not reported | SUSE-SU-2022:2179-1 | Not reported |
| Suse | openssl-1_1 | rpm | enterprise storage 6 | 1.1.0i-150100.14.33.1 | Not reported | SUSE-SU-2022:2179-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libssl3]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
- [libssl-dev]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
- [libssl-doc]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
- [openssl]Unknown
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.4-1dsa · openssl · debian · bookworm
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_5818.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2022-2068]
- [https://osv.dev/vulnerability/ALPINE-CVE-2022-2068]
- [https://osv.dev/vulnerability/DSA-5169-1]
- [https://osv.dev/vulnerability/SUSE-SU-2022:2179-1]
- [https://osv.dev/vulnerability/SUSE-SU-2022:2180-1]
- [https://osv.dev/vulnerability/SUSE-SU-2022:2181-1]
- [https://osv.dev/vulnerability/SUSE-SU-2022:2309-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2022-2068]
- [https://osv.dev/vulnerability/USN-5488-1]
- [https://osv.dev/vulnerability/USN-5488-2]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:12159-1]
- [https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-319-01.json]
- [https://security-tracker.debian.org/tracker/CVE-2022-2068]
- [https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-2068.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0054.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]