UpHeron
All vulnerabilities

Servers and applications

CVE-2022-2068

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly…

Severity
High 7.3
Published
21 Jun 2022
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2zf, 1.1.1p, 3.0.4
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2zf
  • From 1.1.1 before 1.1.1p
  • From 3.0.0 before 3.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-2068
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-2068