CVE-2022-0778
published 2022-03-15CVE-2022-0778: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this…
PriorityP262high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
70.56%
99.3th percentile
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).
Affected
59 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos_big_sur | — | — |
| apple | macos_monterey | — | — |
| apple | security_update_2022-004_catalina | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | openssl | < openssl 1.1.1n-1 (bookworm) | openssl 1.1.1n-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| mariadb | mariadb | >= 10.2.0 < 10.2.42 | 10.2.42 |
| mariadb | mariadb | >= 10.3.0 < 10.3.33 | 10.3.33 |
| mariadb | mariadb | >= 10.4.0 < 10.4.23 | 10.4.23 |
| mariadb | mariadb | >= 10.5.0 < 10.5.14 | 10.5.14 |
| mariadb | mariadb | >= 10.6.0 < 10.6.6 | 10.6.6 |
| mariadb | mariadb | >= 10.7.0 < 10.7.2 | 10.7.2 |
| msrc | azl3_edk2_20230301gitf80f052277c8-37_on_azure_linux_3.0 | — | — |
| msrc | azl3_edk2_20240223gitedc6681206c1-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_rust_1.75.0-14_on_azure_linux_3.0 | — | — |
| msrc | azl3_rust_1.86.0-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_shim-unsigned-aarch64_15.8-5_on_azure_linux_3.0 | — | — |
| msrc | azl3_shim-unsigned-x64_15.8-5_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_openssl_1.1.1k-12_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Trigger vector: crafted X.509 certificate with invalid explicit elliptic curve parameters causes BN_mod_sqrt() to loop infinitely; certificate parsing occurs before signature verification, so any process parsing an externally supplied certificate is vulnerable. ↗
- →Crafted private keys containing explicit elliptic curve parameters can also trigger the infinite loop — monitor for abnormal CPU/hang conditions during private key parsing operations. ↗
- →In OpenSSL 1.0.2, the public key is not parsed during initial certificate parsing, but any operation requiring the public key (including signature verification of a self-signed certificate) will trigger the loop — a self-signed certificate can be used as an attack vector. ↗
- →Affected attack surfaces include TLS clients consuming server certificates, TLS servers consuming client certificates, CAs parsing CSRs, and hosting providers accepting customer certificates/keys — prioritize monitoring at TLS handshake inspection points. ↗
- →Palo Alto Networks firewall, VPN, and XDR agent products were confirmed vulnerable — treat these as high-priority assets for patching and anomaly monitoring. ↗
- →Hitachi Energy MicroSCADA Pro/X SYS600 (versions 10.3.1 and earlier, and 9.x) are vulnerable ICS/OT assets; exploitation is remotely possible with low attack complexity — isolate from internet and business networks. ↗
- →CVSS vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H — network-reachable, no authentication required, no user interaction; use this to prioritize detection rules for unauthenticated TLS handshake anomalies. ↗
- ·Affected OpenSSL versions are 1.0.2 through 1.0.2zc, 1.1.1 through 1.1.1m, and 3.0.0–3.0.1; fixed in 1.0.2zd, 1.1.1n, and 3.0.2 respectively. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_msrc7.5HIGH
vendor_oracle7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
edk2 regression
osv·2025-11-28·CVSS 7.4
CVE-2023-45236 [HIGH] edk2 regression
edk2 regression
USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a
regression in the UEFI network boot. This update reverts the corresponding
fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)
It was discovered that
OSV
edk2 vulnerabilities
osv·2025-11-26·CVSS 7.4
CVE-2023-45236 [HIGH] edk2 vulnerabilities
edk2 vulnerabilities
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)
It was discovered that the EDK II PE/COFF loader incorrectly handled
certain memory operations. An attacker could possibly use this issue to
cause a denial of service, obtain sensitive information, or execute
arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2024-38
OSV
nodejs vulnerabilities
osv·2023-10-30·CVSS 7.5
CVE-2022-0778 [HIGH] nodejs vulnerabilities
nodejs vulnerabilities
Tavis Ormandy discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. (CVE-2022-0778)
Elison Niven discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022-1292)
Chancen and Daniel Fiala discovered that Node.js incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022
GHSA
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
ghsa·2022-03-16
CVE-2022-0778 [HIGH] CWE-835 openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private
OSV
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
osv·2022-03-16
CVE-2022-0778 [HIGH] openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private
OSV
Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
osv·2022-03-15
CVE-2022-0778 Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates
The `BN_mod_sqrt()` function, which computes a modular square root, contains
a bug that can cause it to loop forever for non-prime moduli.
Internally this function is used when parsing certificates that contain
elliptic curve public keys in compressed form or explicit elliptic curve
parameters with a base point encoded in compressed form.
It is possible to trigger the infinite loop by crafting a certificate that
has invalid explicit curve parameters.
Since certificate parsing happens prior to verification of the certificate
signature, any process that parses an externally supplied certificate may thus
be subject to a denial of service attack. The infinite loop can also be
reached when parsing crafted private keys as t
OSV
CVE-2022-0778: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli
osv·2022-03-15·CVSS 7.5
CVE-2022-0778 [HIGH] CVE-2022-0778: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situati
Ubuntu
EDK II regression
vendor_ubuntu·2025-11-28·CVSS 5.8
CVE-2023-45236 [MEDIUM] EDK II regression
Title: EDK II regression
Summary: USN-7894-1 introduced a regression in EDK II
USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a
regression in the UEFI network boot. This update reverts the corresponding
fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS
Ubuntu
EDK II vulnerabilities
vendor_ubuntu·2025-11-26·CVSS 7.4
CVE-2023-45236 [HIGH] EDK II vulnerabilities
Title: EDK II vulnerabilities
Summary: Several security issues were fixed in EDK II.
It was discovered that EDK II was susceptible to a predictable TCP Initial
Sequence Number. An attacker could possibly use this issue to gain
unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu
24.04 LTS. (CVE-2023-45236, CVE-2023-45237)
It was discovered that EDK II incorrectly handled S3 sleep. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2024-1298)
It was discovered that the EDK II PE/COFF loader incorrectly handled
certain memory operations. An attacker could possibly use this issue to
cause a denial of service, obtain sensitive information, or execute
arbitrary code. This issue o
CISA ICS
Siemens BFCClient
cisa_ics·2025-08-14
Siemens BFCClient
ICS Advisory
##
Siemens BFCClient
Release DateAugust 14, 2025
Alert CodeICSA-25-226-21
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: BFCClient
- Vulnerabilities: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Read, Loop with Unreachabl
Palo Alto
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
vendor_paloalto·2024-04-10·CVSS 9.8
CVE-2015-5739 [CRITICAL] PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS. While it was not determined that these CVEs have any significant impact on PAN-OS, they have been fixed out of an abundance of caution. CVE Summary CVE-2015-5739 This CVE is fixed in PAN-OS 11.0.4, and all later PAN-OS versions. CVE-2016-10228 This CVE is fixed in PAN-OS 11.1.3, and all later PAN-OS versions. CVE-2017-8923 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2017-9120 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2018-25009 This CVE is fixed in PAN-OS 10.2.8, 11.0.4, 11.1.3, and all later PAN-OS versions. CVE-2
CISA ICS
Siemens SIDIS Prime
cisa_ics·2024-02-15·CVSS 7.4
[HIGH] Siemens SIDIS Prime
ICS Advisory
##
Siemens SIDIS Prime
Release DateFebruary 15, 2024
Alert CodeICSA-24-046-02
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIDIS Prime
- Vulnerabilities: Use of Insufficiently Random Values, NULL Pointer Dereference, Infinite Loop
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker with
Ubuntu
Node.js vulnerabilities
vendor_ubuntu·2023-10-30·CVSS 7.5
CVE-2022-0778 [HIGH] Node.js vulnerabilities
Title: Node.js vulnerabilities
Summary: Several security issues were fixed in Node.js.
Tavis Ormandy discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. (CVE-2022-0778)
Elison Niven discovered that Node.js incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2022-1292)
Chancen and Daniel Fiala discovered that Node.js incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker c
CISA ICS
Hitachi Energy’s RTU500 Series Product (Update B)
cisa_ics·2023-10-19·CVSS 7.4
[HIGH] Hitachi Energy’s RTU500 Series Product (Update B)
ICS Advisory
##
Hitachi Energy’s RTU500 Series Product (Update B)
Last RevisedOctober 19, 2023
Alert CodeICSA-23-143-02
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Hitachi Energy
- Equipment: RTU500 Series
- Vulnerabilities: Type Confusion, Observable Timing Discrepancy, Out-of-bounds Read, Infinite Loop, Classic Buffer Overflow
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to crash the device being accessed or cause a denial-of-service condition.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Hitachi Energy's RTU500 Series Product, are affected:
- RTU500 series CMU Firmware: version 12.0.1 through 12.0.15
CISA ICS
Hitachi Energy Gateway Station
cisa_ics·2023-02-28·CVSS 7.5
[HIGH] Hitachi Energy Gateway Station
ICS Advisory
##
Hitachi Energy Gateway Station
Release DateFebruary 28, 2023
Alert CodeICSA-23-059-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Hitachi Energy
- Equipment: Gateway Station (GWS)
- Vulnerabilities: NULL Pointer Dereference, Infinite Loop
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could cause affected modules to stop working.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
Hitachi Energy reports these vulnerabilities affect open-source software (OpenLDAP and OpenSSL) used by the following Gateway Station (GWS) versions:
- GWS 2.0.0.0
- GWS 2.1.0.0
- GWS 2.2.0.0
- GWS 2.3.0.0
- GWS 2.4.0.0
- GWS 3.0.0.0
- GWS 3.1.0.0
- GWS 3.2.0.0 and earlier
CISA ICS
Mitsubishi Electric Multiple Factory Automation Products (Update D)
cisa_ics·2022-11-01·CVSS 7.5
[HIGH] Mitsubishi Electric Multiple Factory Automation Products (Update D)
ICS Advisory
##
Mitsubishi Electric Multiple Factory Automation Products (Update D)
Release DateFebruary 02, 2023
Alert CodeICSA-22-221-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Mitsubishi Electric
- Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module
- Vulnerabilities: Infinite Loop, OS Command Injection
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-22-221-01 Mitsubishi Electric Multiple Factory Automation Products (Update C) that was published November 01, 2022, to the ICS webpage on cisa.gov/ics.
## 3. RISK EVALUATION
Successful exploitation of these vulnerabilities
CISA ICS
Siemens OpenSSL Affected Industrial Products (Update E)
cisa_ics·2022-10-13
Siemens OpenSSL Affected Industrial Products (Update E)
ICS Advisory
##
Siemens OpenSSL Affected Industrial Products (Update E)
Last RevisedJanuary 13, 2023
Alert CodeICSA-22-167-14
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Multiple industrial products
- Vulnerability: Infinite Loop
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory titled ICSA-22-167-14 Siemens OpenSSL Affected Industrial Produc
CISA ICS
Hitachi Energy MicroSCADA Pro X SYS600
cisa_ics·2022-09-29·CVSS 7.5
[HIGH] Hitachi Energy MicroSCADA Pro X SYS600
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Hitachi Energy MicroSCADA Pro X SYS600
Last RevisedSeptember 29, 2022
Alert CodeICSA-22-272-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Hitachi Energy
- Equipment: MicroSCADA Pro/X SYS600
- Vulnerability: NULL Pointer Dereference, Infinite Loop
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could cause the affected modules in the product to stop working.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
Hitachi Energy reports this vulnerability affects the following SCADA products used
CISA ICS
Mitsubishi Electric Multiple Factory Automation Products (Update C)
cisa_ics·2022-08-30·CVSS 7.5
[HIGH] Mitsubishi Electric Multiple Factory Automation Products (Update C)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Mitsubishi Electric Multiple Factory Automation Products (Update C)
Last RevisedNovember 02, 2022
Alert CodeICSA-22-221-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Mitsubishi Electric
- Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module
- Vulnerabilities: Infinite Loop, OS Command Injection
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-22-221-01 Mitsubishi Electric Multiple Factory Autom
Oracle
Oracle Oracle Communications Risk Matrix: SEPP (OpenSSL) — CVE-2022-0778
vendor_oracle·2022-07-15·CVSS 7.5
CVE-2022-0778 [HIGH] Oracle Oracle Communications Risk Matrix: SEPP (OpenSSL) — CVE-2022-0778
Oracle Oracle Communications Risk Matrix: SEPP (OpenSSL) vulnerability
CVE: CVE-2022-0778
CVSS: 7.5
Protocol: TLS
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2022 (JUL 2022)
Apple
CVE-2022-0778: macOS Big Sur 11.6.6
vendor_apple·2022-05-16·CVSS 7.5
CVE-2022-0778 [HIGH] CVE-2022-0778: macOS Big Sur 11.6.6
Apple Security Update: About the security content of macOS Big Sur 11.6.6
Product: macOS Big Sur
Version: 11.6.6
CVE: CVE-2022-0778
Component: CVE-2022-0778
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
Apple
CVE-2022-0778: Security Update 2022-004 Catalina
vendor_apple·2022-05-16·CVSS 7.5
CVE-2022-0778 [HIGH] CVE-2022-0778: Security Update 2022-004 Catalina
Apple Security Update: About the security content of Security Update 2022-004 Catalina
Product: Security Update 2022-004 Catalina
CVE: CVE-2022-0778
Component: CVE-2022-0778
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
Apple
CVE-2022-0778: macOS Monterey 12.4
vendor_apple·2022-05-16·CVSS 7.5
CVE-2022-0778 [HIGH] CVE-2022-0778: macOS Monterey 12.4
Apple Security Update: About the security content of macOS Monterey 12.4
Product: macOS Monterey
Version: 12.4
CVE: CVE-2022-0778
Component: CVE-2022-0778
Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
CISA ICS
Mitsubishi Electric MELSOFT iQ AppPortal
cisa_ics·2022-05-12·CVSS 5.5
[MEDIUM] Mitsubishi Electric MELSOFT iQ AppPortal
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Mitsubishi Electric MELSOFT iQ AppPortal
Last RevisedMay 12, 2022
Alert CodeICSA-22-132-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Mitsubishi Electric
- Equipment: MELSOFT iQ AppPortal
- Vulnerabilities: Missing Authorization, Out-of-bounds Write, NULL Pointer Dereference, Classic Buffer Overflow, HTTP Request Smuggling, Infinite Loop
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, malicious program execution, information disclosure, informa
Oracle
Oracle Oracle Java SE Risk Matrix: Node (OpenSSL) — CVE-2022-0778
vendor_oracle·2022-04-15·CVSS 7.5
CVE-2022-0778 [HIGH] Oracle Oracle Java SE Risk Matrix: Node (OpenSSL) — CVE-2022-0778
Oracle Oracle Java SE Risk Matrix: Node (OpenSSL) vulnerability
CVE: CVE-2022-0778
CVSS: 7.5
Protocol: HTTPS
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2022 (APR 2022)
Palo Alto
Impact of the OpenSSL Infinite Loop Vulnerability CVE-2022-0778
vendor_paloalto·2022-03-31·CVSS 7.5
CVE-2022-0778 [HIGH] CWE-834 Impact of the OpenSSL Infinite Loop Vulnerability CVE-2022-0778
Impact of the OpenSSL Infinite Loop Vulnerability CVE-2022-0778
The Palo Alto Networks Product Security Assurance team has evaluated the OpenSSL infinite loop vulnerability (CVE-2022-0778) as it relates to our products.
This vulnerability causes the OpenSSL library to enter an infinite loop when parsing an invalid certificate and can result in a Denial-of-Service (DoS) to the application. An attacker does not need a verified certificate to exploit this vulnerability because parsing a bad certificate triggers the infinite loop before the verification process is completed.
The Prisma Cloud and Cortex XSOAR products are not impacted by this vulnerability. However, PAN-OS, GlobalProtect app, and Cortex XDR agent software contain a vulnerable version of the OpenSSL library and product availa
Ubuntu
OpenSSL vulnerability
vendor_ubuntu·2022-03-15
CVE-2022-0778 OpenSSL vulnerability
Title: OpenSSL vulnerability
Summary: OpenSSL could be made to stop responding if it opened a specially crafted
certificate.
Tavis Ormandy discovered that OpenSSL incorrectly parsed certain
certificates. A remote attacker could possibly use this issue to cause
OpenSSH to stop responding, resulting in a denial of service.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
BSD
FreeBSD-SA-22:03.openssl: OpenSSL certificate parsing infinite loop
bsd_advisories·2022-03-15·CVSS 7.5
CVE-2022-0778 [HIGH] FreeBSD-SA-22:03.openssl: OpenSSL certificate parsing infinite loop
FreeBSD-SA-22:03.openssl Security Advisory
The FreeBSD Project
Topic: OpenSSL certificate parsing infinite loop
Category: contrib
Module: openssl
Announced: 2022-03-15
Credits: Tavis Ormandy from Google
Affects: All supported versions of FreeBSD.
Corrected: 2022-03-15 16:51:46 UTC (stable/13, 13.1-STABLE)
2022-03-15 17:42:48 UTC (releng/13.1, 13.1-BETA1-p1)
2022-03-15 17:43:02 UTC (releng/13.0, 13.0-RELEASE-p8)
2022-03-15 16:56:09 UTC (stable/12, 12.3-STABLE)
2022-03-15 18:17:50 UTC (releng/12.3, 12.3-RELEASE-p3)
2022-03-15 18:17:16 UTC (releng/12.2, 12.2-RELEASE-p14)
CVE Name: CVE-2022-0778
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit .
I. Background
FreeBSD inclu
Ubuntu
OpenSSL vulnerability
vendor_ubuntu·2022-03-15
CVE-2022-0778 OpenSSL vulnerability
Title: OpenSSL vulnerability
Summary: OpenSSL could be made to stop responding if it opened a specially crafted
certificate.
USN-5328-1 fixed a vulnerability in OpenSSL. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
Tavis Ormandy discovered that OpenSSL incorrectly parsed certain
certificates. A remote attacker could possibly use this issue to cause
OpenSSH to stop responding, resulting in a denial of service.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Red Hat
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
vendor_redhat·2022-03-15·CVSS 7.5
CVE-2022-0778 [HIGH] CWE-835 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as
Microsoft
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
vendor_msrc·2022-03-08·CVSS 7.5
CVE-2022-0778 [HIGH] CWE-835 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
openssl: openssl
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference
Debian
CVE-2022-0778: openssl - The BN_mod_sqrt() function, which computes a modular square root, contains a bug...
vendor_debian·2022·CVSS 7.5
CVE-2022-0778 [HIGH] CVE-2022-0778: openssl - The BN_mod_sqrt() function, which computes a modular square root, contains a bug...
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situati
Suricata
ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via UDP (CVE-2022-0778)
suricata·2022-04-11·CVSS 7.5
CVE-2022-0778 [HIGH] ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via UDP (CVE-2022-0778)
ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via UDP (CVE-2022-0778)
Rule: alert udp any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via UDP (CVE-2022-0778)"; content:"|30 82|"; content:"|30 0a 06 08 2a 86 48 ce 3d 04 03|"; distance:0; content:"|2a 86 48 ce 3d 01 01 02 02 02 b9|"; distance:0; fast_pattern; content:"|20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 17|"; within:36; content:"|20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|"; within:36; content:"|04 03|"; distance:23; within:2; content:"|00 08|"; distance:1; within:2; reference:url,www.rtcsec.com/article/exploiting-cve-2022-0778-in-openssl-vs-webr
Suricata
ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via TCP (CVE-2022-0778)
suricata·2022-04-11·CVSS 7.5
CVE-2022-0778 [HIGH] ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via TCP (CVE-2022-0778)
ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via TCP (CVE-2022-0778)
Rule: alert tcp any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET EXPLOIT Possible OpenSSL Infinite Loop Inducing Cert Inbound via TCP (CVE-2022-0778)"; flow:established,to_server; content:"|30 82|"; content:"|30 0a 06 08 2a 86 48 ce 3d 04 03|"; distance:0; content:"|2a 86 48 ce 3d 01 01 02 02 02 b9|"; distance:0; fast_pattern; content:"|20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 17|"; within:36; content:"|20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|"; within:36; content:"|04 03|"; distance:23; within:2; content:"|00 08|"; distance:1; within:2; reference:url,www.rtcsec.com/article/exploiting-cve-
No public exploits indexed.
arXiv
UniBOM -- A Unified SBOM Analysis and Visualisation Tool for IoT Systems and Beyond
arxiv_fulltext·2025-11-27
UniBOM -- A Unified SBOM Analysis and Visualisation Tool for IoT Systems and Beyond
UniBOM – A Unified SBOM Analysis and Visualisation Tool for IoT Systems and Beyond
Vadim Safronov
Equal contribution.
[email protected]
University of Oxford
Oxford
United Kingdom
Ionut Bostan
[1]
[email protected]
NquiringMinds
Southampton
United Kingdom
Nicholas Allott
[email protected]
NquiringMinds
Southampton
United Kingdom
Andrew Martin
[email protected]
University of Oxford
Oxford
United Kingdom
Safronov et al.
## Abstract
Modern networked systems rely on complex software stacks, which often conceal vulnerabilities arising from intricate interdependencies. A Software Bill of Materials (SBOM) is effective for identifying dependencies and mitigating security risks. However, existing SBOM solutions lack precision, particularly in binary analysis a
arXiv
Exploring the Limits of ChatGPT in Software Security Applications
arxiv_fulltext·2023-12-08
Exploring the Limits of ChatGPT in Software Security Applications
## Abstract
Large language models (LLMs) have undergone rapid evolution and achieved remarkable results in recent times. OpenAI's ChatGPT, backed by GPT-3.5 or GPT-4, has gained instant popularity due to its strong capability across a wide range of tasks, including natural language tasks, coding, mathematics, and engaging conversations. However, the impacts and limits of such LLMs in system security domain are less explored.
In this paper, we delve into the limits of LLMs (i.e., ChatGPT) in seven software security applications including vulnerability detection/repair, debugging, debloating, decompilation, patching, root cause analysis, symbolic execution, and fuzzing. Our exploration reveals that ChatGPT not only excels at generating code, which is the conventional application of languag
Zscaler
Security Advisory for OpenSSL Vulnerabilities | Zscaler Blog
blogs_zscaler·2022-11-01·CVSS 7.5
[HIGH] Security Advisory for OpenSSL Vulnerabilities | Zscaler Blog
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
Checkpoint
11th April – Threat Intelligence Report
blogs_checkpoint·2022-04-11
CVE-2022-22965 11th April – Threat Intelligence Report
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 11th April – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 11th April, please download our Threat Intelligence Bulletin .
Top Attacks and Breaches
Check Point Research discovered six applications spreading banking malware on Google Play Store by masquerading as anti-virus solutions, with over 15,000 downloads. The malware, known as ‘Sharkbot’, steals credentials and banking information of Android users.
Check Point Harmony Mobile and Threat Emulation provide protection
http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.htmlhttp://seclists.org/fulldisclosure/2022/May/33http://seclists.org/fulldisclosure/2022/May/35http://seclists.org/fulldisclosure/2022/May/38https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdfhttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246https://lists.debian.org/debian-lts-announce/2022/03/msg00023.htmlhttps://lists.debian.org/debian-lts-announce/2022/03/msg00024.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002https://security.gentoo.org/glsa/202210-02https://security.netapp.com/advisory/ntap-20220321-0002/https://security.netapp.com/advisory/ntap-20220429-0005/https://security.netapp.com/advisory/ntap-20240621-0006/https://support.apple.com/kb/HT213255https://support.apple.com/kb/HT213256https://support.apple.com/kb/HT213257https://www.debian.org/security/2022/dsa-5103https://www.openssl.org/news/secadv/20220315.txthttps://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.tenable.com/security/tns-2022-06https://www.tenable.com/security/tns-2022-07https://www.tenable.com/security/tns-2022-08https://www.tenable.com/security/tns-2022-09http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.htmlhttp://seclists.org/fulldisclosure/2022/May/33http://seclists.org/fulldisclosure/2022/May/35http://seclists.org/fulldisclosure/2022/May/38https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdfhttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246https://lists.debian.org/debian-lts-announce/2022/03/msg00023.htmlhttps://lists.debian.org/debian-lts-announce/2022/03/msg00024.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002https://security.gentoo.org/glsa/202210-02https://security.netapp.com/advisory/ntap-20220321-0002/https://security.netapp.com/advisory/ntap-20220429-0005/https://security.netapp.com/advisory/ntap-20240621-0006/https://support.apple.com/kb/HT213255https://support.apple.com/kb/HT213256https://support.apple.com/kb/HT213257https://www.debian.org/security/2022/dsa-5103https://www.openssl.org/news/secadv/20220315.txthttps://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.tenable.com/security/tns-2022-06https://www.tenable.com/security/tns-2022-07https://www.tenable.com/security/tns-2022-08https://www.tenable.com/security/tns-2022-09https://cert-portal.siemens.com/productcert/html/ssa-019200.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-028723.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-108696.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-398330.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-712929.html
2022-03-15
Published