- Vulnerability/
- USN-5488-1
USN-5488-1: OpenSSL vulnerability
First published: Tue Jun 21 2022(Updated: )
Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the c_rehash script. A local attacker could possibly use this issue to execute arbitrary commands when c_rehash is run.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/openssl | <3.0.2-0ubuntu1.5 | 3.0.2-0ubuntu1.5 |
| Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openssl | <1.1.1l-1ubuntu1.5 | 1.1.1l-1ubuntu1.5 |
| Ubuntu | =21.10 | |
| All of | ||
| ubuntu/openssl | <1.1.1f-1ubuntu2.15 | 1.1.1f-1ubuntu2.15 |
| Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openssl | <1.1.1-1ubuntu2.1~18.04.19 | 1.1.1-1ubuntu2.1~18.04.19 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openssl1.0 | <1.0.2n-1ubuntu5.10 | 1.0.2n-1ubuntu5.10 |
| Ubuntu | =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-2068
- https://ubuntu.com/security/notices/USN-5488-2
- https://ubuntu.com/security/notices/USN-6457-1
- https://ubuntu.com/security/notices/USN-7018-1
- https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.5
- https://launchpad.net/ubuntu/+source/openssl/1.1.1l-1ubuntu1.5
- https://launchpad.net/ubuntu/+source/openssl/1.1.1f-1ubuntu2.15
- https://launchpad.net/ubuntu/+source/openssl/1.1.1-1ubuntu2.1~18.04.19
- https://launchpad.net/ubuntu/+source/openssl1.0/1.0.2n-1ubuntu5.10
- https://ubuntu.com/security/notices/USN-5488-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this OpenSSL vulnerability?
The vulnerability ID for this OpenSSL vulnerability is CVE-2022-2068.
How does the OpenSSL vulnerability impact the system?
The OpenSSL vulnerability allows a local attacker to execute arbitrary commands when the c_rehash script is run.
Which versions of OpenSSL are affected by this vulnerability?
The versions affected by this vulnerability are 1.0.2n-1ubuntu5.10, 1.1.1-1ubuntu2.1~18.04.19, 1.1.1f-1ubuntu2.15, 1.1.1l-1ubuntu1.5, and 3.0.2-0ubuntu1.5.
How can I fix the OpenSSL vulnerability?
To fix the OpenSSL vulnerability, update the OpenSSL package to version 3.0.2-0ubuntu1.5, 1.1.1l-1ubuntu1.5, 1.1.1f-1ubuntu2.15, 1.1.1-1ubuntu2.1~18.04.19, or 1.0.2n-1ubuntu5.10 depending on your Ubuntu version.
Where can I find more information about the OpenSSL vulnerability?
You can find more information about the OpenSSL vulnerability in the following references: [USN-5488-2](https://ubuntu.com/security/notices/USN-5488-2) and [USN-6457-1](https://ubuntu.com/security/notices/USN-6457-1).
- agent/type
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/description
- agent/event
- agent/references
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/22.04
- version/ubuntu/21.10
- version/ubuntu/20.04
- version/ubuntu/18.04