CVE catalog
CVE-2022-4450
EDK II vulnerabilities
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 28.59% · Oct 22, 2026
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | fixed |
| Ubuntu | openssl | noble | 3.0.8-1 | fixed |
| Ubuntu | edk2 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-aa64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-arm | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-ia32 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-riscv64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-x64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | ovmf | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | ovmf-ia32 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-aarch64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-arm | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-riscv64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Cpe | openssl | Not reported | 3.0.8 | fixed |
| Cpe | stormshield_network_security | Not reported | 4.6.3 | fixed |
| Ubuntu | edk2 | pro | 0~20190606.20d2e5a1-2ubuntu1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20190828.37eef910-3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20190828.37eef910-4 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-1ubuntu1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.4 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.5 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.6 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.6+esm1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2n-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.5 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.6 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.7 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.8 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.9 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.10 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.15 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.17 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.19 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.20 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.21 | fixed |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.fips.2.8 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.fips.7.1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1c-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu6 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.5 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.8 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.9 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.10 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.11 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.12 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.13 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.15 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.16 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.17 | fixed |
| Ubuntu | edk2 | 22.04 | 2021.08~rc0-2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.08-3 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.11~rc1-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.11-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.11-2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02~rc1-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02~rc1-1ubuntu1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.3 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.4 | fixed |
| Ubuntu | nodejs | 22.04 | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.3 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.8-1 | Not reported | Not reported | Not reported |
| Ubuntu | edk2 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-aa64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-arm | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-ia32 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-riscv64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-x64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf-ia32 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-aarch64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-arm | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-riscv64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Cpe | openssl | cpe | Not reported | 3.0.8 | Not reported | NVD-CVE-2022-4450 | Not reported |
| Cpe | stormshield_network_security | cpe | Not reported | 4.6.3 | Not reported | NVD-CVE-2022-4450 | Not reported |
| Ubuntu | openssl | deb | 18.04 | 1.1.1-1ubuntu2.1~18.04.21 | Not reported | UBUNTU-CVE-2022-4450 | Not reported |
| Ubuntu | openssl | deb | 20.04 | 1.1.1f-1ubuntu2.17 | Not reported | UBUNTU-CVE-2022-4450 | Not reported |
| Ubuntu | edk2 | deb | 22.04 | 2022.02-3ubuntu0.22.04.4 | Not reported | UBUNTU-CVE-2022-4450 | Not reported |
| Ubuntu | nodejs | deb | 22.04 | 12.22.9~dfsg-1ubuntu3.3 | Not reported | UBUNTU-CVE-2022-4450 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.8 | Not reported | UBUNTU-CVE-2022-4450 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libssl3]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
- [libssl-dev]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
- [libssl-doc]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
- [openssl]Unknown
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
Observed:
References
- [https://access.redhat.com/errata/RHSA-2023:3408]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2022-4450]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2022-4450]
- [https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-229-01.json]
- [https://security-tracker.debian.org/tracker/CVE-2022-4450]
- [https://ubuntu.com/security/notices/USN-7894-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0304.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]