OpenSSL CVE-2022-1292 OS Command Injection Vulnerability

description-logoDescription

OpenSSL c_rehash script fails to sanitize shell metacharacters, enabling arbitrary command execution on systems where it runs automatically, including Debian Linux 9-11; fixed in OpenSSL 1.0.2ze, 1.1.1o, 3.0.3.

affected-products-logoAffected Applications

OpenSSL

Version Updates

Date Version Status Detail
2024-12-17 1.00791
Modified
OpenSSL
2024-06-20 1.00695
New
OpenSSL