CVE catalog

CVE-2022-23491

python-certifi: CVE-2022-23491

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.53% · Oct 27, 2026

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython-certifisid2026.10.19+ds-1fixed
Debianpython-certififorky2026.10.19+ds-1fixed
Debianpython-certifitrixie2025.1.31+ds-1fixed
Debianpython-certifibookworm2022.9.24-1vulnerable
Opensusepython-certifitumbleweed2026.7.22-1.1fixed
Susemozilla-nsslinux enterprise micro 5.33.79.3-150400.3.23.1fixed
Susemozilla-nsslinux enterprise module for basesystem 15 sp43.79.3-150400.3.23.1fixed
Opensusemozilla-nssleap micro 5.33.79.3-150400.3.23.1fixed
Opensusemozilla-nssleap 15.43.79.3-150400.3.23.1fixed
Susemozilla-nsslinux enterprise high performance computing 15 sp1-ltss3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise high performance computing 15 sp2-ltss3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise high performance computing 15 sp3-espos3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise high performance computing 15 sp3-ltss3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise real time 15 sp33.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise server 15 sp1-ltss3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise server 15 sp2-ltss3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise server 15 sp3-ltss3.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise server for sap applications 15 sp13.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise server for sap applications 15 sp23.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise server for sap applications 15 sp33.79.3-150000.3.90.1fixed
Susemozilla-nssmanager proxy 4.23.79.3-150000.3.90.1fixed
Susemozilla-nssmanager retail branch server 4.23.79.3-150000.3.90.1fixed
Susemozilla-nssmanager server 4.23.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise micro 5.13.79.3-150000.3.90.1fixed
Susemozilla-nsslinux enterprise micro 5.23.79.3-150000.3.90.1fixed
Susemozilla-nssenterprise storage 63.79.3-150000.3.90.1fixed
Susemozilla-nssenterprise storage 73.79.3-150000.3.90.1fixed
Susemozilla-nssenterprise storage 7.13.79.3-150000.3.90.1fixed
Opensusemozilla-nssleap micro 5.23.79.3-150000.3.90.1fixed
Ubuntuca-certificatespro20150426ubuntu1vulnerable
Ubuntuca-certificatespro20160104ubuntu1vulnerable
Ubuntuca-certificatespro20170717~16.04.1vulnerable
Ubuntuca-certificatespro20170717~16.04.2vulnerable
Ubuntuca-certificatespro20190110~16.04.1vulnerable
Ubuntuca-certificatespro20201027ubuntu0.16.04.1vulnerable
Ubuntuca-certificatespro20210119~16.04.1vulnerable
Ubuntuca-certificatespro20210119~16.04.1ubuntu0.1~esm1vulnerable
Ubuntuca-certificatespro20211016~16.04.1~esm1vulnerable
Ubuntuca-certificatespro20211016~16.04.1~esm2fixed
Ubuntuca-certificates18.0420170717vulnerable
Ubuntuca-certificates18.0420180409vulnerable
Ubuntuca-certificates18.0420190110~18.04.1vulnerable
Ubuntuca-certificates18.0420201027ubuntu0.18.04.1vulnerable
Ubuntuca-certificates18.0420210119~18.04.1vulnerable
Ubuntuca-certificates18.0420210119~18.04.2vulnerable
Ubuntuca-certificates18.0420211016~18.04.1vulnerable
Ubuntuca-certificates18.0420211016ubuntu0.18.04.1fixed
Ubuntuca-certificates20.0420190110vulnerable
Ubuntuca-certificates20.0420190110ubuntu1vulnerable
Ubuntuca-certificates20.0420190110ubuntu1.1vulnerable
Ubuntuca-certificates20.0420201027ubuntu0.20.04.1vulnerable
Ubuntuca-certificates20.0420210119~20.04.1vulnerable
Ubuntuca-certificates20.0420210119~20.04.2vulnerable
Ubuntuca-certificates20.0420211016~20.04.1vulnerable
Ubuntuca-certificates20.0420211016ubuntu0.20.04.1fixed
Ubuntuca-certificates22.0420210119ubuntu1vulnerable
Ubuntuca-certificates22.0420211016vulnerable
Ubuntuca-certificates22.0420211016ubuntu0.22.04.1fixed
Opensusepython-certifitumbleweed2023.7.22-2.1fixed
Susepython-certifilinux enterprise micro 5.32018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise module for basesystem 15 sp42018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise high performance computing 15 sp1-ltss2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise high performance computing 15 sp2-ltss2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise high performance computing 15 sp3-espos2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise high performance computing 15 sp3-ltss2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise real time 15 sp32018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise server 15 sp1-ltss2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise server 15 sp2-ltss2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise server 15 sp3-ltss2018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise server for sap applications 15 sp12018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise server for sap applications 15 sp22018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise server for sap applications 15 sp32018.1.18-150000.3.3.1fixed
Susepython-certifimanager proxy 4.22018.1.18-150000.3.3.1fixed
Susepython-certifimanager retail branch server 4.22018.1.18-150000.3.3.1fixed
Susepython-certifimanager server 4.22018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise micro 5.12018.1.18-150000.3.3.1fixed
Susepython-certifilinux enterprise micro 5.22018.1.18-150000.3.3.1fixed
Susepython-certifienterprise storage 62018.1.18-150000.3.3.1fixed
Susepython-certifienterprise storage 72018.1.18-150000.3.3.1fixed
Susepython-certifienterprise storage 7.12018.1.18-150000.3.3.1fixed
Opensusepython-certifileap micro 5.22018.1.18-150000.3.3.1fixed
Opensusepython-certifileap micro 5.32018.1.18-150000.3.3.1fixed
Opensusepython-certifileap 15.42018.1.18-150000.3.3.1fixed
Susemozilla-nssopenstack cloud 93.79.3-58.91.1fixed
Susemozilla-nssopenstack cloud crowbar 93.79.3-58.91.1fixed
Susemozilla-nsslinux enterprise server for sap applications 12 sp43.79.3-58.91.1fixed
Susemozilla-nsslinux enterprise software development kit 12 sp53.79.3-58.91.1fixed
Susemozilla-nsslinux enterprise server 12 sp2-bcl3.79.3-58.91.1fixed
Susemozilla-nsslinux enterprise server 12 sp4-ltss3.79.3-58.91.1fixed
Susemozilla-nsslinux enterprise server 12 sp53.79.3-58.91.1fixed
Susemozilla-nsslinux enterprise server for sap applications 12 sp53.79.3-58.91.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython-certifisourcesid2023.7.22-1unimportantNot reportedNot reported
Debianpython-certifisourceforky2023.7.22-1unimportantNot reportedNot reported
Debianpython-certifisourcetrixie2023.7.22-1unimportantNot reportedNot reported
Debianpython-certifisourcebookworm(unfixed)unimportantNot reportedNot reported
Opensusepython-certifirpmtumbleweed2026.7.22-1.1Not reportedOPENSUSE-SU-2026:11421-1Not reported
Susemozilla-nssrpmlinux enterprise micro 5.33.79.3-150400.3.23.1Not reportedSUSE-SU-2023:0119-1Not reported
Susemozilla-nssrpmlinux enterprise module for basesystem 15 sp43.79.3-150400.3.23.1Not reportedSUSE-SU-2023:0119-1Not reported
Opensusemozilla-nssrpmleap micro 5.33.79.3-150400.3.23.1Not reportedSUSE-SU-2023:0119-1Not reported
Opensusemozilla-nssrpmleap 15.43.79.3-150400.3.23.1Not reportedSUSE-SU-2023:0119-1Not reported
Susemozilla-nssrpmlinux enterprise high performance computing 15 sp1-ltss3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise high performance computing 15 sp2-ltss3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise high performance computing 15 sp3-espos3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise high performance computing 15 sp3-ltss3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise real time 15 sp33.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise server 15 sp1-ltss3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise server 15 sp2-ltss3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise server 15 sp3-ltss3.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 15 sp13.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 15 sp23.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 15 sp33.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmmanager proxy 4.23.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmmanager retail branch server 4.23.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmmanager server 4.23.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise micro 5.13.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmlinux enterprise micro 5.23.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmenterprise storage 63.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmenterprise storage 73.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Susemozilla-nssrpmenterprise storage 7.13.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Opensusemozilla-nssrpmleap micro 5.23.79.3-150000.3.90.1Not reportedSUSE-SU-2023:0130-1Not reported
Ubuntuca-certificatesdebpro20211016~16.04.1~esm2Not reportedUBUNTU-CVE-2022-23491Not reported
Ubuntuca-certificatesdeb18.0420211016ubuntu0.18.04.1Not reportedUBUNTU-CVE-2022-23491Not reported
Ubuntuca-certificatesdeb20.0420211016ubuntu0.20.04.1Not reportedUBUNTU-CVE-2022-23491Not reported
Ubuntuca-certificatesdeb22.0420211016ubuntu0.22.04.1Not reportedUBUNTU-CVE-2022-23491Not reported
Opensusepython-certifirpmtumbleweed2023.7.22-2.1Not reportedOPENSUSE-SU-2024:13237-1Not reported
Susepython-certifirpmlinux enterprise micro 5.32018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise module for basesystem 15 sp42018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise high performance computing 15 sp1-ltss2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise high performance computing 15 sp2-ltss2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise high performance computing 15 sp3-espos2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise high performance computing 15 sp3-ltss2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise real time 15 sp32018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise server 15 sp1-ltss2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise server 15 sp2-ltss2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise server 15 sp3-ltss2018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise server for sap applications 15 sp12018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise server for sap applications 15 sp22018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise server for sap applications 15 sp32018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmmanager proxy 4.22018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmmanager retail branch server 4.22018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmmanager server 4.22018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise micro 5.12018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmlinux enterprise micro 5.22018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmenterprise storage 62018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmenterprise storage 72018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susepython-certifirpmenterprise storage 7.12018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Opensusepython-certifirpmleap micro 5.22018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Opensusepython-certifirpmleap micro 5.32018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Opensusepython-certifirpmleap 15.42018.1.18-150000.3.3.1Not reportedSUSE-SU-2023:0139-1Not reported
Susemozilla-nssrpmopenstack cloud 93.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmopenstack cloud crowbar 93.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 12 sp43.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmlinux enterprise software development kit 12 sp53.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmlinux enterprise server 12 sp2-bcl3.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmlinux enterprise server 12 sp4-ltss3.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmlinux enterprise server 12 sp53.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported
Susemozilla-nssrpmlinux enterprise server for sap applications 12 sp53.79.3-58.91.1Not reportedSUSE-SU-2023:0118-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [python3-certifi]Affected

    Source package: [python-certifi]

    Details (2)
    • 2022.9.24-1 · all · bookworm

      Affected

      dsa · python-certifi · debian · bookworm

    • 2022.9.24-1 · all · bookworm

      Affected

      dsa · python-certifi · debian · bookworm

[openSUSE Tumbleweed]

  • Source package: [python-certifi]

    Details (1)
    • 2026.7.22-1.1 · noarch · tumbleweed

      Unknown · Fixed: 2023.7.22-2.1, 2026.7.22-1.1

      Version impact unknown

      dsa · python-certifi · opensuse · tumbleweed

  • Source package: [python-certifi]

    Details (1)
    • 2026.7.22-1.1 · noarch · tumbleweed

      Unknown · Fixed: 2023.7.22-2.1, 2026.7.22-1.1

      Version impact unknown

      dsa · python-certifi · opensuse · tumbleweed

Observed:

References