UpHeron
All vulnerabilities

Servers and applications

CVE-2022-0778

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a…

Severity
High 7.5
Published
15 Mar 2022
Last changed
14 Oct 2026
Added to UpHeron
17 Oct 2026
Fixed in
10.6.6, 10.7.2, 12.22.11, 14.19.1, 16.14.2, 17.7.2
Sources
NVD

Affected software

SoftwareAffected versions
MariaDBServers and applications · cpe:a:mariadb:mariadb
  • From 10.2.0 before 10.2.42
  • From 10.3.0 before 10.3.33
  • From 10.4.0 before 10.4.23
  • From 10.5.0 before 10.5.14
  • From 10.6.0 before 10.6.6
  • From 10.7.0 before 10.7.2
Node.jsServers and applications · cpe:a:nodejs:node.js
  • After 17.0.0 before 17.7.2
  • From 16.13.0 before 16.14.2
  • After 16.0.0 up to 16.12.0
  • From 14.15.0 before 14.19.1
All 7 release lines
  • From 12.0.0 up to 12.12.0
  • From 12.13.0 before 12.22.11
  • After 14.0.0 up to 14.14.0
  • From 14.15.0 before 14.19.1
  • After 16.0.0 up to 16.12.0
  • From 16.13.0 before 16.14.2
  • After 17.0.0 before 17.7.2
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2zd
  • From 1.1.0 before 1.1.1n
  • From 3.0.0 before 3.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-0778
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-0778