{"id":"BIT-node-min-2022-0778","revision":null,"records":[{"revision":"19c26a44ffb3469ebed85520ca196ed3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-0778","aliases":[],"title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","state":0,"publishedAt":"2022-03-15T17:05:20.382+00:00","modifiedAt":"2026-10-14T12:12:36.346+00:00","affected":[{"ecosystem":"Vendor product","name":"OpenSSL","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"OpenSSL\",\n                    \"product\": \"OpenSSL\",\n                    \"versions\": [\n                        {\n                            \"version\": \"Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc)\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.openssl.org/news/secadv/20220315.txt","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","https://www.debian.org/security/2022/dsa-5103","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220321-0002/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","https://www.tenable.com/security/tns-2022-06","https://www.tenable.com/security/tns-2022-07","https://www.tenable.com/security/tns-2022-08","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","https://www.oracle.com/security-alerts/cpujul2022.html","https://support.apple.com/kb/HT213257","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213255","https://www.tenable.com/security/tns-2022-09","https://security.netapp.com/advisory/ntap-20220429-0005/","http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20240621-0006/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-0778","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-0778","identifiers":["CVE-2022-0778"]},"retained":false,"historicalAffected":[]},{"revision":"70f88da965d54671b5afe5feb7bc2091","observedAt":"2026-11-09T23:10:42.27+00:00","statement":{"source":"euvd","id":"EUVD-2022-1575","aliases":["CVE-2022-0778","GHSA-x3mh-jvjw-3xwx"],"title":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in c…","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://www.openssl.org/news/secadv/20220315.txt","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","https://www.debian.org/security/2022/dsa-5103","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://security.netapp.com/advisory/ntap-20220321-0002/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","https://www.tenable.com/security/tns-2022-06","https://www.tenable.com/security/tns-2022-07","https://www.tenable.com/security/tns-2022-08","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","https://www.oracle.com/security-alerts/cpujul2022.html","https://support.apple.com/kb/HT213257","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213255","https://www.tenable.com/security/tns-2022-09","https://security.netapp.com/advisory/ntap-20220429-0005/","http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20240621-0006/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1575","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Mar 15, 2022, 5:05:20 PM","dateUpdated":"Oct 14, 2026, 12:12:36 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2024:11933-1","title":"libopenssl-1_1-devel-1.1.1n-1.1 on GA media","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2022-0551","title":"Kyocera Drucker: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-39238","CVE-2022-0778","CVE-2022-25344"]},{"id":"SUSE-SU-2022:1459-1","title":"Security update for nodejs14","vulnerabilityIds":["CVE-2021-44906","CVE-2021-44907","CVE-2022-0235","CVE-2022-0778"]},{"id":"sca-2025-0001","title":"Multiple vulnerabilities in SICK MEAC300","vulnerabilityIds":["CVE-2025-0867","CVE-2022-0778"]},{"id":"openSUSE-SU-2024:11953-1","title":"cargo-audit-advisory-db-20220323-1.1 on GA media","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:4896","title":"Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]","vulnerabilityIds":["CVE-2018-25032","CVE-2021-4028","CVE-2021-4083","CVE-2022-0778","CVE-2022-1271","CVE-2022-24903","CVE-2022-25636"]},{"id":"SUSE-SU-2022:14916-1","title":"Security update for openssl1","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:1462-1","title":"Security update for nodejs14","vulnerabilityIds":["CVE-2021-44906","CVE-2021-44907","CVE-2022-0235","CVE-2022-0778"]},{"id":"ICSA-25-226-21","title":"Siemens BFCClient","vulnerabilityIds":["CVE-2021-3711","CVE-2021-3712","CVE-2022-0778","CVE-2023-0286","CVE-2023-0464"]},{"id":"SSA-019200","title":"SSA-019200: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11n Devices Before V6.6.0","vulnerabilityIds":["CVE-2020-24588","CVE-2020-26139","CVE-2020-26140","CVE-2020-26141","CVE-2020-26143","CVE-2020-26144","CVE-2020-26146","CVE-2020-26147","CVE-2021-3712","CVE-2022-0778","CVE-2022-31765","CVE-2022-36323","CVE-2022-36324","CVE-2022-36325","CVE-2023-44373"]},{"id":"WID-SEC-W-2022-1057","title":"Apple macOS: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-32882","CVE-2022-32794","CVE-2022-32790","CVE-2022-26776","CVE-2022-26775","CVE-2022-26772","CVE-2022-26770","CVE-2022-26769","CVE-2022-26768","CVE-2022-26767","CVE-2022-26766","CVE-2022-26765","CVE-2022-26764","CVE-2022-26763","CVE-2022-26762","CVE-2022-26761","CVE-2022-26757","CVE-2022-26756","CVE-2022-26755","CVE-2022-26754","CVE-2022-26753","CVE-2022-26752","CVE-2022-26751","CVE-2022-26750","CVE-2022-26749","CVE-2022-26748","CVE-2022-26746","CVE-2022-26745","CVE-2022-26743","CVE-2022-26742","CVE-2022-26741","CVE-2022-26740","CVE-2022-26739","CVE-2022-26738","CVE-2022-26737","CVE-2022-26736","CVE-2022-26731","CVE-2022-26728","CVE-2022-26727","CVE-2022-26726","CVE-2022-26725","CVE-2022-26723","CVE-2022-26722","CVE-2022-26721","CVE-2022-26720","CVE-2022-26719","CVE-2022-26718","CVE-2022-26717","CVE-2022-26716","CVE-2022-26715","CVE-2022-26714","CVE-2022-26712","CVE-2022-26711","CVE-2022-26710","CVE-2022-26709","CVE-2022-26708","CVE-2022-26706","CVE-2022-26704","CVE-2022-26701","CVE-2022-26700","CVE-2022-26698","CVE-2022-26697","CVE-2022-26696","CVE-2022-26694","CVE-2022-26693","CVE-2022-23308","CVE-2022-22721","CVE-2022-22720","CVE-2022-22719","CVE-2022-22677","CVE-2022-22675","CVE-2022-22674","CVE-2022-22665","CVE-2022-22663","CVE-2022-22589","CVE-2022-0778","CVE-2022-0530","CVE-2022-0128","CVE-2021-46059","CVE-2021-45444","CVE-2021-44790","CVE-2021-44224","CVE-2021-4193","CVE-2021-4192","CVE-2021-4187","CVE-2021-4173","CVE-2021-4166","CVE-2021-4136","CVE-2018-25032"]},{"id":"RHSA-2022:1390","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update","vulnerabilityIds":["CVE-2021-3516","CVE-2021-3517","CVE-2021-3518","CVE-2021-3537","CVE-2021-3541","CVE-2022-0778","CVE-2022-22720","CVE-2022-23308"]},{"id":"WID-SEC-W-2022-0302","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten","vulnerabilityIds":["CVE-2016-2124","CVE-2019-14822","CVE-2019-19906","CVE-2020-15250","CVE-2020-17049","CVE-2020-25717","CVE-2020-25718","CVE-2020-25719","CVE-2020-25721","CVE-2020-25722","CVE-2020-9484","CVE-2021-21707","CVE-2021-22926","CVE-2021-23192","CVE-2021-27815","CVE-2021-30846","CVE-2021-30848","CVE-2021-30849","CVE-2021-30851","CVE-2021-30858","CVE-2021-33430","CVE-2021-34141","CVE-2021-35604","CVE-2021-35624","CVE-2021-3572","CVE-2021-3711","CVE-2021-3733","CVE-2021-3737","CVE-2021-3738","CVE-2021-3770","CVE-2021-3778","CVE-2021-3796","CVE-2021-38115","CVE-2021-3872","CVE-2021-3875","CVE-2021-3903","CVE-2021-39212","CVE-2021-39272","CVE-2021-3928","CVE-2021-3968","CVE-2021-3973","CVE-2021-3974","CVE-2021-3984","CVE-2021-39920","CVE-2021-39921","CVE-2021-39922","CVE-2021-39923","CVE-2021-39924","CVE-2021-39925","CVE-2021-39926","CVE-2021-39928","CVE-2021-39929","CVE-2021-4008","CVE-2021-4009","CVE-2021-4010","CVE-2021-4011","CVE-2021-40145","CVE-2021-4019","CVE-2021-4034","CVE-2021-4069","CVE-2021-40812","CVE-2021-41133","CVE-2021-4140","CVE-2021-41495","CVE-2021-41496","CVE-2021-4160","CVE-2021-4181","CVE-2021-41817","CVE-2021-41819","CVE-2021-4182","CVE-2021-4183","CVE-2021-4184","CVE-2021-4185","CVE-2021-42717","CVE-2021-42762","CVE-2021-43331","CVE-2021-43332","CVE-2021-43395","CVE-2021-43527","CVE-2021-43528","CVE-2021-43536","CVE-2021-43537","CVE-2021-43538","CVE-2021-43539","CVE-2021-43541","CVE-2021-43542","CVE-2021-43543","CVE-2021-43545","CVE-2021-43546","CVE-2021-43566","CVE-2021-43818","CVE-2021-44142","CVE-2021-44224","CVE-2021-44227","CVE-2021-44420","CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2021-44540","CVE-2021-44541","CVE-2021-44542","CVE-2021-44543","CVE-2021-44790","CVE-2021-45078","CVE-2021-45115","CVE-2021-45116","CVE-2021-45452","CVE-2021-45960","CVE-2021-46143","CVE-2022-0336","CVE-2022-0391","CVE-2022-0566","CVE-2022-0581","CVE-2022-0582","CVE-2022-0583","CVE-2022-0585","CVE-2022-0586","CVE-2022-0778","CVE-2022-21248","CVE-2022-21263","CVE-2022-21271","CVE-2022-21282","CVE-2022-21291","CVE-2022-21293","CVE-2022-21294","CVE-2022-21296","CVE-2022-21298","CVE-2022-21299","CVE-2022-21305","CVE-2022-21340","CVE-2022-21341","CVE-2022-21349","CVE-2022-21360","CVE-2022-21365","CVE-2022-21375","CVE-2022-21384","CVE-2022-21416","CVE-2022-21446","CVE-2022-21461","CVE-2022-21463","CVE-2022-21493","CVE-2022-21494","CVE-2022-21712","CVE-2022-21716","CVE-2022-21824","CVE-2022-22719","CVE-2022-22720","CVE-2022-22721","CVE-2022-22737","CVE-2022-22738","CVE-2022-22739","CVE-2022-22740","CVE-2022-22741","CVE-2022-22742","CVE-2022-22743","CVE-2022-22744","CVE-2022-22745","CVE-2022-22746","CVE-2022-22747","CVE-2022-22748","CVE-2022-22751","CVE-2022-22753","CVE-2022-22754","CVE-2022-22756","CVE-2022-22759","CVE-2022-22760","CVE-2022-22761","CVE-2022-22763","CVE-2022-22764","CVE-2022-22815","CVE-2022-22816","CVE-2022-22817","CVE-2022-22818","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23181","CVE-2022-23833","CVE-2022-23852","CVE-2022-23943","CVE-2022-23990","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-26381","CVE-2022-26383","CVE-2022-26384","CVE-2022-26386","CVE-2022-26387","CVE-2022-26485","CVE-2022-26486"]},{"id":"openSUSE-SU-2024:11927-1","title":"libopenssl-3-devel-3.0.2-1.1 on GA media","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:5326","title":"Red Hat Security Advisory: compat-openssl10 security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1066","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:1461-1","title":"Security update for nodejs12","vulnerabilityIds":["CVE-2021-44906","CVE-2021-44907","CVE-2022-0235","CVE-2022-0778"]},{"id":"ICSA-26-111-07","title":"Siemens SCALANCE","vulnerabilityIds":["CVE-2020-24588","CVE-2020-26139","CVE-2020-26140","CVE-2020-26141","CVE-2020-26143","CVE-2020-26144","CVE-2020-26146","CVE-2020-26147","CVE-2021-3712","CVE-2022-0778","CVE-2022-31765","CVE-2022-36323","CVE-2022-36324","CVE-2022-36325","CVE-2023-44373"]},{"id":"RHSA-2022:1519","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:14915-1","title":"Security update for openssl","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2024-2086","title":"SAP Patchday September 2024","vulnerabilityIds":["CVE-2013-3587","CVE-2022-0778","CVE-2023-0215","CVE-2023-0286","CVE-2024-33003","CVE-2024-41728","CVE-2024-41729","CVE-2024-41730","CVE-2024-42371","CVE-2024-42378","CVE-2024-42380","CVE-2024-44112","CVE-2024-44113","CVE-2024-44114","CVE-2024-44115","CVE-2024-44116","CVE-2024-44117","CVE-2024-44120","CVE-2024-44121","CVE-2024-45279","CVE-2024-45280","CVE-2024-45281","CVE-2024-45283","CVE-2024-45284","CVE-2024-45285","CVE-2024-45286"]},{"id":"ICSA-22-167-14","title":"Siemens OpenSSL Affected Industrial Products","vulnerabilityIds":["CVE-2022-0778"]},{"id":"ICSA-23-348-10","title":"Siemens SIMATIC S7-1500","vulnerabilityIds":["CVE-2013-0340","CVE-2013-4235","CVE-2014-7209","CVE-2015-20107","CVE-2016-3189","CVE-2016-3709","CVE-2016-4658","CVE-2016-5131","CVE-2016-9318","CVE-2016-10228","CVE-2016-10739","CVE-2017-0663","CVE-2017-7375","CVE-2017-7376","CVE-2017-9047","CVE-2017-9048","CVE-2017-9049","CVE-2017-9050","CVE-2017-15422","CVE-2017-16931","CVE-2017-16932","CVE-2017-17512","CVE-2017-18258","CVE-2018-0495","CVE-2018-12886","CVE-2018-14404","CVE-2018-14567","CVE-2018-18928","CVE-2018-19591","CVE-2018-20482","CVE-2018-20843","CVE-2018-25032","CVE-2019-3855","CVE-2019-3856","CVE-2019-3857","CVE-2019-3858","CVE-2019-3859","CVE-2019-3860","CVE-2019-3861","CVE-2019-3862","CVE-2019-3863","CVE-2019-5018","CVE-2019-5094","CVE-2019-5188","CVE-2019-5435","CVE-2019-5436","CVE-2019-5443","CVE-2019-5481","CVE-2019-5482","CVE-2019-6109","CVE-2019-6110","CVE-2019-6111","CVE-2019-6488","CVE-2019-7309","CVE-2019-8457","CVE-2019-9169","CVE-2019-9636","CVE-2019-9674","CVE-2019-9740","CVE-2019-9923","CVE-2019-9936","CVE-2019-9937","CVE-2019-9947","CVE-2019-9948","CVE-2019-10160","CVE-2019-11360","CVE-2019-12290","CVE-2019-12900","CVE-2019-12904","CVE-2019-13057","CVE-2019-13565","CVE-2019-13627","CVE-2019-15847","CVE-2019-15903","CVE-2019-16056","CVE-2019-16168","CVE-2019-16905","CVE-2019-17498","CVE-2019-17543","CVE-2019-17594","CVE-2019-17595","CVE-2019-18224","CVE-2019-18276","CVE-2019-18348","CVE-2019-19126","CVE-2019-19242","CVE-2019-19244","CVE-2019-19317","CVE-2019-19603","CVE-2019-19645","CVE-2019-19646","CVE-2019-19880","CVE-2019-19906","CVE-2019-19923","CVE-2019-19924","CVE-2019-19925","CVE-2019-19926","CVE-2019-19956","CVE-2019-19959","CVE-2019-20218","CVE-2019-20367","CVE-2019-20388","CVE-2019-20795","CVE-2019-20907","CVE-2019-25013","CVE-2019-1010022","CVE-2019-1010023","CVE-2019-1010024","CVE-2019-1010025","CVE-2019-1010180","CVE-2020-1712","CVE-2020-1751","CVE-2020-1752","CVE-2020-6096","CVE-2020-7595","CVE-2020-8169","CVE-2020-8177","CVE-2020-8231","CVE-2020-8284","CVE-2020-8285","CVE-2020-8286","CVE-2020-8315","CVE-2020-8492","CVE-2020-9327","CVE-2020-10029","CVE-2020-10531","CVE-2020-10543","CVE-2020-10735","CVE-2020-10878","CVE-2020-11501","CVE-2020-11655","CVE-2020-11656","CVE-2020-12062","CVE-2020-12243","CVE-2020-12723","CVE-2020-12762","CVE-2020-13434","CVE-2020-13435","CVE-2020-13529","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632","CVE-2020-13776","CVE-2020-13777","CVE-2020-13871","CVE-2020-14145","CVE-2020-14422","CVE-2020-15358","CVE-2020-15523","CVE-2020-15778","CVE-2020-15801","CVE-2020-19185","CVE-2020-19186","CVE-2020-19187","CVE-2020-19188","CVE-2020-19189","CVE-2020-19190","CVE-2020-19909","CVE-2020-21047","CVE-2020-21913","CVE-2020-22218","CVE-2020-24659","CVE-2020-24977","CVE-2020-25692","CVE-2020-25709","CVE-2020-25710","CVE-2020-26116","CVE-2020-27618","CVE-2020-28196","CVE-2020-29361","CVE-2020-29362","CVE-2020-29363","CVE-2020-29562","CVE-2020-29573","CVE-2020-35525","CVE-2020-35527","CVE-2020-36221","CVE-2020-36222","CVE-2020-36223","CVE-2020-36224","CVE-2020-36225","CVE-2020-36226","CVE-2020-36227","CVE-2020-36228","CVE-2020-36229","CVE-2020-36230","CVE-2021-3177","CVE-2021-3326","CVE-2021-3426","CVE-2021-3516","CVE-2021-3517","CVE-2021-3518","CVE-2021-3520","CVE-2021-3537","CVE-2021-3541","CVE-2021-3580","CVE-2021-3733","CVE-2021-3737","CVE-2021-3826","CVE-2021-3997","CVE-2021-3998","CVE-2021-3999","CVE-2021-4122","CVE-2021-4189","CVE-2021-4209","CVE-2021-20193","CVE-2021-20227","CVE-2021-20231","CVE-2021-20232","CVE-2021-20305","CVE-2021-22876","CVE-2021-22890","CVE-2021-22897","CVE-2021-22898","CVE-2021-22901","CVE-2021-22922","CVE-2021-22923","CVE-2021-22924","CVE-2021-22925","CVE-2021-22926","CVE-2021-22945","CVE-2021-22946","CVE-2021-22947","CVE-2021-23336","CVE-2021-27212","CVE-2021-27218","CVE-2021-27219","CVE-2021-27645","CVE-2021-28041","CVE-2021-28153","CVE-2021-28363","CVE-2021-28861","CVE-2021-31239","CVE-2021-32292","CVE-2021-33294","CVE-2021-33560","CVE-2021-33574","CVE-2021-33910","CVE-2021-35942","CVE-2021-36084","CVE-2021-36085","CVE-2021-36086","CVE-2021-36087","CVE-2021-36222","CVE-2021-36690","CVE-2021-37600","CVE-2021-37750","CVE-2021-38604","CVE-2021-43396","CVE-2021-43618","CVE-2021-44879","CVE-2021-45960","CVE-2021-46143","CVE-2021-46195","CVE-2021-46828","CVE-2021-46848","CVE-2022-0391","CVE-2022-0563","CVE-2022-0778","CVE-2022-1271","CVE-2022-1292","CVE-2022-1304","CVE-2022-1343","CVE-2022-1434","CVE-2022-1473","CVE-2022-2068","CVE-2022-2097","CVE-2022-2274","CVE-2022-2509","CVE-2022-3715","CVE-2022-3821","CVE-2022-4304","CVE-2022-4450","CVE-2022-22576","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23218","CVE-2022-23219","CVE-2022-23308","CVE-2022-23852","CVE-2022-23990","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-26488","CVE-2022-27774","CVE-2022-27775","CVE-2022-27776","CVE-2022-27778","CVE-2022-27779","CVE-2022-27780","CVE-2022-27781","CVE-2022-27782","CVE-2022-27943","CVE-2022-28321","CVE-2022-29155","CVE-2022-29824","CVE-2022-30115","CVE-2022-32205","CVE-2022-32206","CVE-2022-32207","CVE-2022-32208","CVE-2022-32221","CVE-2022-35252","CVE-2022-35260","CVE-2022-35737","CVE-2022-37434","CVE-2022-37454","CVE-2022-40303","CVE-2022-40304","CVE-2022-40674","CVE-2022-42898","CVE-2022-42915","CVE-2022-42916","CVE-2022-43551","CVE-2022-43552","CVE-2022-43680","CVE-2022-45061","CVE-2022-45873","CVE-2022-46908","CVE-2022-48303","CVE-2022-48522","CVE-2022-48560","CVE-2023-0215","CVE-2023-0286","CVE-2023-0361","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0687","CVE-2023-1077","CVE-2023-1206","CVE-2023-2650","CVE-2023-2953","CVE-2023-3212","CVE-2023-3446","CVE-2023-3609","CVE-2023-3611","CVE-2023-3772","CVE-2023-3817","CVE-2023-4016","CVE-2023-4039","CVE-2023-4623","CVE-2023-4807","CVE-2023-4813","CVE-2023-4921","CVE-2023-5156","CVE-2023-5678","CVE-2023-5717","CVE-2023-5981","CVE-2023-6121","CVE-2023-6817","CVE-2023-6931","CVE-2023-6932","CVE-2023-23914","CVE-2023-23915","CVE-2023-23916","CVE-2023-24329","CVE-2023-25136","CVE-2023-25139","CVE-2023-26604","CVE-2023-27371","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27537","CVE-2023-27538","CVE-2023-28484","CVE-2023-29383","CVE-2023-29469","CVE-2023-29491","CVE-2023-29499","CVE-2023-31085","CVE-2023-32611","CVE-2023-32636","CVE-2023-32643","CVE-2023-32665","CVE-2023-34319","CVE-2023-34969","CVE-2023-35001","CVE-2023-35945","CVE-2023-38408","CVE-2023-39128","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-39615","CVE-2023-40283","CVE-2023-42754","CVE-2023-42755","CVE-2023-45322","CVE-2023-45853","CVE-2023-45871","CVE-2023-45898","CVE-2023-45918","CVE-2023-46862","CVE-2023-52425","CVE-2023-52426","CVE-2023-52444","CVE-2023-52464","CVE-2023-52612","CVE-2023-52622","CVE-2023-52675","CVE-2023-52699","CVE-2024-0584","CVE-2024-2004","CVE-2024-2236","CVE-2024-2379","CVE-2024-2398","CVE-2024-2466","CVE-2024-2511","CVE-2024-5535","CVE-2024-5742","CVE-2024-6409","CVE-2024-7264","CVE-2024-8096","CVE-2024-8176","CVE-2024-9143","CVE-2024-11053","CVE-2024-26645","CVE-2024-26671","CVE-2024-26679","CVE-2024-26772","CVE-2024-26773","CVE-2024-26777","CVE-2024-26805","CVE-2024-26835","CVE-2024-26863","CVE-2024-26878","CVE-2024-26880","CVE-2024-26898","CVE-2024-26901","CVE-2024-26923","CVE-2024-26957","CVE-2024-26973","CVE-2024-27020","CVE-2024-27032","CVE-2024-27065","CVE-2024-27074","CVE-2024-28182","CVE-2024-28757","CVE-2024-28834","CVE-2024-28835","CVE-2024-33621","CVE-2024-34459","CVE-2024-35807","CVE-2024-35809","CVE-2024-35830","CVE-2024-35888","CVE-2024-35910","CVE-2024-35925","CVE-2024-35944","CVE-2024-36017","CVE-2024-36286","CVE-2024-36484","CVE-2024-36904","CVE-2024-36905","CVE-2024-36934","CVE-2024-37356","CVE-2024-38596","CVE-2024-38598","CVE-2024-38612","CVE-2024-38621","CVE-2024-38780","CVE-2024-39292","CVE-2024-39469","CVE-2024-39487","CVE-2024-39489","CVE-2024-40901","CVE-2024-40959","CVE-2024-41046","CVE-2024-42070","CVE-2024-42096","CVE-2024-42106","CVE-2024-42131","CVE-2024-42154","CVE-2024-43871","CVE-2024-44944","CVE-2024-44965","CVE-2024-46743","CVE-2024-46745","CVE-2024-46750","CVE-2024-47684","CVE-2024-47701","CVE-2024-47707","CVE-2024-47737","CVE-2024-48881","CVE-2024-49881","CVE-2024-49884","CVE-2024-49948","CVE-2024-49949","CVE-2024-49952","CVE-2024-49982","CVE-2024-49997","CVE-2024-50006","CVE-2024-50040","CVE-2024-50045","CVE-2024-50251","CVE-2024-50262","CVE-2024-50299","CVE-2024-50301","CVE-2024-50602","CVE-2024-52332","CVE-2024-52533","CVE-2024-53057","CVE-2024-53124","CVE-2024-53140","CVE-2024-53164","CVE-2024-53165","CVE-2024-53217","CVE-2024-56433","CVE-2024-56569","CVE-2024-56570","CVE-2024-56600","CVE-2024-56601","CVE-2024-56606","CVE-2024-56644","CVE-2024-56650","CVE-2024-56770","CVE-2024-56779","CVE-2024-56780","CVE-2024-57884","CVE-2024-57901","CVE-2025-0167","CVE-2025-0395","CVE-2025-0665","CVE-2025-0725","CVE-2025-1390","CVE-2025-3277","CVE-2025-3360","CVE-2025-21694","CVE-2025-26466","CVE-2025-29087","CVE-2025-29088","CVE-2025-32728"]},{"id":"SSA-398330","title":"SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP  >= V3.1.0 and < V3.1.5","vulnerabilityIds":["CVE-2013-0340","CVE-2013-4235","CVE-2014-7209","CVE-2015-20107","CVE-2016-3189","CVE-2016-3709","CVE-2016-4658","CVE-2016-5131","CVE-2016-9318","CVE-2016-10228","CVE-2016-10739","CVE-2017-0663","CVE-2017-7375","CVE-2017-7376","CVE-2017-9047","CVE-2017-9048","CVE-2017-9049","CVE-2017-9050","CVE-2017-15422","CVE-2017-16931","CVE-2017-16932","CVE-2017-17512","CVE-2017-18258","CVE-2018-0495","CVE-2018-12886","CVE-2018-14404","CVE-2018-14567","CVE-2018-18928","CVE-2018-19591","CVE-2018-20482","CVE-2018-20843","CVE-2018-25032","CVE-2019-3855","CVE-2019-3856","CVE-2019-3857","CVE-2019-3858","CVE-2019-3859","CVE-2019-3860","CVE-2019-3861","CVE-2019-3862","CVE-2019-3863","CVE-2019-5018","CVE-2019-5094","CVE-2019-5188","CVE-2019-5435","CVE-2019-5436","CVE-2019-5443","CVE-2019-5481","CVE-2019-5482","CVE-2019-6109","CVE-2019-6110","CVE-2019-6111","CVE-2019-6488","CVE-2019-7309","CVE-2019-8457","CVE-2019-9169","CVE-2019-9636","CVE-2019-9674","CVE-2019-9740","CVE-2019-9923","CVE-2019-9936","CVE-2019-9937","CVE-2019-9947","CVE-2019-9948","CVE-2019-10160","CVE-2019-11360","CVE-2019-12290","CVE-2019-12900","CVE-2019-12904","CVE-2019-13057","CVE-2019-13565","CVE-2019-13627","CVE-2019-15847","CVE-2019-15903","CVE-2019-16056","CVE-2019-16168","CVE-2019-16905","CVE-2019-17498","CVE-2019-17543","CVE-2019-17594","CVE-2019-17595","CVE-2019-18224","CVE-2019-18276","CVE-2019-18348","CVE-2019-19126","CVE-2019-19242","CVE-2019-19244","CVE-2019-19317","CVE-2019-19603","CVE-2019-19645","CVE-2019-19646","CVE-2019-19880","CVE-2019-19906","CVE-2019-19923","CVE-2019-19924","CVE-2019-19925","CVE-2019-19926","CVE-2019-19956","CVE-2019-19959","CVE-2019-20218","CVE-2019-20367","CVE-2019-20388","CVE-2019-20795","CVE-2019-20907","CVE-2019-25013","CVE-2019-1010022","CVE-2019-1010023","CVE-2019-1010024","CVE-2019-1010025","CVE-2019-1010180","CVE-2020-1712","CVE-2020-1751","CVE-2020-1752","CVE-2020-6096","CVE-2020-7595","CVE-2020-8169","CVE-2020-8177","CVE-2020-8231","CVE-2020-8284","CVE-2020-8285","CVE-2020-8286","CVE-2020-8315","CVE-2020-8492","CVE-2020-9327","CVE-2020-10029","CVE-2020-10531","CVE-2020-10543","CVE-2020-10735","CVE-2020-10878","CVE-2020-11501","CVE-2020-11655","CVE-2020-11656","CVE-2020-12062","CVE-2020-12243","CVE-2020-12723","CVE-2020-12762","CVE-2020-13434","CVE-2020-13435","CVE-2020-13529","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632","CVE-2020-13776","CVE-2020-13777","CVE-2020-13871","CVE-2020-14145","CVE-2020-14422","CVE-2020-15358","CVE-2020-15523","CVE-2020-15778","CVE-2020-15801","CVE-2020-19185","CVE-2020-19186","CVE-2020-19187","CVE-2020-19188","CVE-2020-19189","CVE-2020-19190","CVE-2020-19909","CVE-2020-21047","CVE-2020-21913","CVE-2020-22218","CVE-2020-24659","CVE-2020-24977","CVE-2020-25692","CVE-2020-25709","CVE-2020-25710","CVE-2020-26116","CVE-2020-27618","CVE-2020-28196","CVE-2020-29361","CVE-2020-29362","CVE-2020-29363","CVE-2020-29562","CVE-2020-29573","CVE-2020-35525","CVE-2020-35527","CVE-2020-36221","CVE-2020-36222","CVE-2020-36223","CVE-2020-36224","CVE-2020-36225","CVE-2020-36226","CVE-2020-36227","CVE-2020-36228","CVE-2020-36229","CVE-2020-36230","CVE-2021-3177","CVE-2021-3326","CVE-2021-3426","CVE-2021-3516","CVE-2021-3517","CVE-2021-3518","CVE-2021-3520","CVE-2021-3537","CVE-2021-3541","CVE-2021-3580","CVE-2021-3733","CVE-2021-3737","CVE-2021-3826","CVE-2021-3997","CVE-2021-3998","CVE-2021-3999","CVE-2021-4122","CVE-2021-4189","CVE-2021-4209","CVE-2021-20193","CVE-2021-20227","CVE-2021-20231","CVE-2021-20232","CVE-2021-20305","CVE-2021-22876","CVE-2021-22890","CVE-2021-22897","CVE-2021-22898","CVE-2021-22901","CVE-2021-22922","CVE-2021-22923","CVE-2021-22924","CVE-2021-22925","CVE-2021-22926","CVE-2021-22945","CVE-2021-22946","CVE-2021-22947","CVE-2021-23336","CVE-2021-27212","CVE-2021-27218","CVE-2021-27219","CVE-2021-27645","CVE-2021-28041","CVE-2021-28153","CVE-2021-28363","CVE-2021-28861","CVE-2021-31239","CVE-2021-32292","CVE-2021-33294","CVE-2021-33560","CVE-2021-33574","CVE-2021-33910","CVE-2021-35942","CVE-2021-36084","CVE-2021-36085","CVE-2021-36086","CVE-2021-36087","CVE-2021-36222","CVE-2021-36690","CVE-2021-37600","CVE-2021-37750","CVE-2021-38604","CVE-2021-43396","CVE-2021-43618","CVE-2021-44879","CVE-2021-45960","CVE-2021-46143","CVE-2021-46195","CVE-2021-46828","CVE-2021-46848","CVE-2022-0391","CVE-2022-0563","CVE-2022-0778","CVE-2022-1271","CVE-2022-1292","CVE-2022-1304","CVE-2022-1343","CVE-2022-1434","CVE-2022-1473","CVE-2022-2068","CVE-2022-2097","CVE-2022-2274","CVE-2022-2509","CVE-2022-3715","CVE-2022-3821","CVE-2022-4304","CVE-2022-4450","CVE-2022-22576","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23218","CVE-2022-23219","CVE-2022-23308","CVE-2022-23852","CVE-2022-23990","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-26488","CVE-2022-27774","CVE-2022-27775","CVE-2022-27776","CVE-2022-27778","CVE-2022-27779","CVE-2022-27780","CVE-2022-27781","CVE-2022-27782","CVE-2022-27943","CVE-2022-28321","CVE-2022-29155","CVE-2022-29824","CVE-2022-30115","CVE-2022-32205","CVE-2022-32206","CVE-2022-32207","CVE-2022-32208","CVE-2022-32221","CVE-2022-35252","CVE-2022-35260","CVE-2022-35737","CVE-2022-37434","CVE-2022-37454","CVE-2022-40303","CVE-2022-40304","CVE-2022-40674","CVE-2022-42898","CVE-2022-42915","CVE-2022-42916","CVE-2022-43551","CVE-2022-43552","CVE-2022-43680","CVE-2022-45061","CVE-2022-45873","CVE-2022-46908","CVE-2022-48303","CVE-2022-48522","CVE-2022-48560","CVE-2023-0215","CVE-2023-0286","CVE-2023-0361","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0687","CVE-2023-1077","CVE-2023-1206","CVE-2023-2650","CVE-2023-2953","CVE-2023-3212","CVE-2023-3446","CVE-2023-3609","CVE-2023-3611","CVE-2023-3772","CVE-2023-3817","CVE-2023-4016","CVE-2023-4039","CVE-2023-4623","CVE-2023-4807","CVE-2023-4813","CVE-2023-4921","CVE-2023-5156","CVE-2023-5678","CVE-2023-5717","CVE-2023-5981","CVE-2023-6121","CVE-2023-6817","CVE-2023-6931","CVE-2023-6932","CVE-2023-23914","CVE-2023-23915","CVE-2023-23916","CVE-2023-24329","CVE-2023-25136","CVE-2023-25139","CVE-2023-26604","CVE-2023-27371","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27537","CVE-2023-27538","CVE-2023-28484","CVE-2023-29383","CVE-2023-29469","CVE-2023-29491","CVE-2023-29499","CVE-2023-31085","CVE-2023-32611","CVE-2023-32636","CVE-2023-32643","CVE-2023-32665","CVE-2023-34319","CVE-2023-34969","CVE-2023-35001","CVE-2023-35945","CVE-2023-38408","CVE-2023-39128","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-39615","CVE-2023-40283","CVE-2023-42754","CVE-2023-42755","CVE-2023-45322","CVE-2023-45853","CVE-2023-45871","CVE-2023-45898","CVE-2023-45918","CVE-2023-46862","CVE-2023-52425","CVE-2023-52426","CVE-2023-52444","CVE-2023-52464","CVE-2023-52612","CVE-2023-52622","CVE-2023-52675","CVE-2023-52699","CVE-2024-0584","CVE-2024-2004","CVE-2024-2236","CVE-2024-2379","CVE-2024-2398","CVE-2024-2466","CVE-2024-2511","CVE-2024-5535","CVE-2024-5742","CVE-2024-6409","CVE-2024-7264","CVE-2024-8096","CVE-2024-8176","CVE-2024-9143","CVE-2024-11053","CVE-2024-26645","CVE-2024-26671","CVE-2024-26679","CVE-2024-26772","CVE-2024-26773","CVE-2024-26777","CVE-2024-26805","CVE-2024-26835","CVE-2024-26863","CVE-2024-26878","CVE-2024-26880","CVE-2024-26898","CVE-2024-26901","CVE-2024-26923","CVE-2024-26957","CVE-2024-26973","CVE-2024-27020","CVE-2024-27032","CVE-2024-27065","CVE-2024-27074","CVE-2024-28182","CVE-2024-28757","CVE-2024-28834","CVE-2024-28835","CVE-2024-33621","CVE-2024-34459","CVE-2024-35807","CVE-2024-35809","CVE-2024-35830","CVE-2024-35888","CVE-2024-35910","CVE-2024-35925","CVE-2024-35944","CVE-2024-36017","CVE-2024-36286","CVE-2024-36484","CVE-2024-36904","CVE-2024-36905","CVE-2024-36934","CVE-2024-37356","CVE-2024-38596","CVE-2024-38598","CVE-2024-38612","CVE-2024-38621","CVE-2024-38780","CVE-2024-39292","CVE-2024-39469","CVE-2024-39487","CVE-2024-39489","CVE-2024-40901","CVE-2024-40959","CVE-2024-41046","CVE-2024-42070","CVE-2024-42096","CVE-2024-42106","CVE-2024-42131","CVE-2024-42154","CVE-2024-43871","CVE-2024-44944","CVE-2024-44965","CVE-2024-46743","CVE-2024-46745","CVE-2024-46750","CVE-2024-47684","CVE-2024-47701","CVE-2024-47707","CVE-2024-47737","CVE-2024-48881","CVE-2024-49881","CVE-2024-49884","CVE-2024-49948","CVE-2024-49949","CVE-2024-49952","CVE-2024-49982","CVE-2024-49997","CVE-2024-50006","CVE-2024-50040","CVE-2024-50045","CVE-2024-50251","CVE-2024-50262","CVE-2024-50299","CVE-2024-50301","CVE-2024-50602","CVE-2024-52332","CVE-2024-52533","CVE-2024-53057","CVE-2024-53124","CVE-2024-53140","CVE-2024-53164","CVE-2024-53165","CVE-2024-53217","CVE-2024-56433","CVE-2024-56569","CVE-2024-56570","CVE-2024-56600","CVE-2024-56601","CVE-2024-56606","CVE-2024-56644","CVE-2024-56650","CVE-2024-56770","CVE-2024-56779","CVE-2024-56780","CVE-2024-57884","CVE-2024-57901","CVE-2025-0167","CVE-2025-0395","CVE-2025-0665","CVE-2025-0725","CVE-2025-1390","CVE-2025-3277","CVE-2025-3360","CVE-2025-21694","CVE-2025-26466","CVE-2025-29087","CVE-2025-29088","CVE-2025-32728"]},{"id":"msrc_CVE-2022-0778","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1263","title":"Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22","vulnerabilityIds":["CVE-2021-0920","CVE-2021-4028","CVE-2021-4083","CVE-2021-4155","CVE-2021-45417","CVE-2022-0330","CVE-2022-0778","CVE-2022-22942","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25315"]},{"id":"RHSA-2022:1073","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"ICSA-25-259-06","title":"Siemens Multiple Industrial Products","vulnerabilityIds":["CVE-2022-0778"]},{"id":"ICSA-22-221-01","title":"Mitsubishi Electric Multiple Factory Automation Products (Update B)","vulnerabilityIds":["CVE-2022-0778","CVE-2022-1292"]},{"id":"SUSE-SU-2022:0856-1","title":"Security update for openssl-1_0_0","vulnerabilityIds":["CVE-2022-0778"]},{"id":"sca-2025-0001","title":"Multiple vulnerabilities in SICK MEAC300","vulnerabilityIds":["CVE-2025-0867","CVE-2022-0778"]},{"id":"RHSA-2022:4899","title":"Red Hat Security Advisory: compat-openssl11 security and bug fix update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:0859-1","title":"Security update for compat-openssl098","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2022-0169","title":"Oracle MySQL: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-22570","CVE-2021-41184","CVE-2021-42340","CVE-2021-44832","CVE-2022-0778","CVE-2022-21412","CVE-2022-21413","CVE-2022-21414","CVE-2022-21415","CVE-2022-21417","CVE-2022-21418","CVE-2022-21423","CVE-2022-21425","CVE-2022-21427","CVE-2022-21435","CVE-2022-21436","CVE-2022-21437","CVE-2022-21438","CVE-2022-21440","CVE-2022-21444","CVE-2022-21451","CVE-2022-21452","CVE-2022-21454","CVE-2022-21457","CVE-2022-21459","CVE-2022-21460","CVE-2022-21462","CVE-2022-21478","CVE-2022-21479","CVE-2022-21482","CVE-2022-21483","CVE-2022-21484","CVE-2022-21485","CVE-2022-21486","CVE-2022-21489","CVE-2022-21490","CVE-2022-22965","CVE-2022-23181","CVE-2022-23305"]},{"id":"WID-SEC-W-2024-0794","title":"Dell ECS: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2018-18074","CVE-2020-10663","CVE-2020-10672","CVE-2020-10673","CVE-2020-10735","CVE-2020-10968","CVE-2020-10969","CVE-2020-11111","CVE-2020-11112","CVE-2020-11113","CVE-2020-11612","CVE-2020-11619","CVE-2020-11620","CVE-2020-11979","CVE-2020-12762","CVE-2020-12825","CVE-2020-13956","CVE-2020-14060","CVE-2020-14061","CVE-2020-14062","CVE-2020-14195","CVE-2020-15250","CVE-2020-1945","CVE-2020-1967","CVE-2020-1971","CVE-2020-24616","CVE-2020-24750","CVE-2020-25649","CVE-2020-25658","CVE-2020-26116","CVE-2020-26137","CVE-2020-26541","CVE-2020-27216","CVE-2020-27218","CVE-2020-27223","CVE-2020-28366","CVE-2020-28493","CVE-2020-29509","CVE-2020-29511","CVE-2020-29582","CVE-2020-29651","CVE-2020-35490","CVE-2020-35491","CVE-2020-35728","CVE-2020-36179","CVE-2020-36180","CVE-2020-36181","CVE-2020-36182","CVE-2020-36183","CVE-2020-36184","CVE-2020-36185","CVE-2020-36186","CVE-2020-36187","CVE-2020-36188","CVE-2020-36189","CVE-2020-36516","CVE-2020-36518","CVE-2020-36557","CVE-2020-36558","CVE-2020-36691","CVE-2020-7238","CVE-2020-8840","CVE-2020-8908","CVE-2020-8911","CVE-2020-8912","CVE-2020-9488","CVE-2020-9493","CVE-2020-9546","CVE-2020-9547","CVE-2020-9548","CVE-2021-20190","CVE-2021-20323","CVE-2021-21290","CVE-2021-21295","CVE-2021-21409","CVE-2021-23840","CVE-2021-23841","CVE-2021-2471","CVE-2021-25642","CVE-2021-26341","CVE-2021-27918","CVE-2021-28153","CVE-2021-28165","CVE-2021-28169","CVE-2021-28861","CVE-2021-29425","CVE-2021-30560","CVE-2021-3114","CVE-2021-33036","CVE-2021-33194","CVE-2021-33195","CVE-2021-33196","CVE-2021-33197","CVE-2021-33503","CVE-2021-33655","CVE-2021-33656","CVE-2021-3424","CVE-2021-34428","CVE-2021-3449","CVE-2021-3450","CVE-2021-3530","CVE-2021-36221","CVE-2021-36373","CVE-2021-36374","CVE-2021-3648","CVE-2021-36690","CVE-2021-3711","CVE-2021-3712","CVE-2021-37136","CVE-2021-37137","CVE-2021-37404","CVE-2021-37533","CVE-2021-3754","CVE-2021-3778","CVE-2021-3796","CVE-2021-3826","CVE-2021-3827","CVE-2021-38297","CVE-2021-3872","CVE-2021-3875","CVE-2021-3903","CVE-2021-3923","CVE-2021-3927","CVE-2021-3928","CVE-2021-3968","CVE-2021-3973","CVE-2021-3974","CVE-2021-3984","CVE-2021-4019","CVE-2021-4037","CVE-2021-4069","CVE-2021-4104","CVE-2021-4136","CVE-2021-4157","CVE-2021-4166","CVE-2021-41771","CVE-2021-4192","CVE-2021-4193","CVE-2021-4203","CVE-2021-42567","CVE-2021-43797","CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2021-44716","CVE-2021-44878","CVE-2021-45078","CVE-2021-46195","CVE-2021-46828","CVE-2021-46848","CVE-2022-0128","CVE-2022-0213","CVE-2022-0225","CVE-2022-0261","CVE-2022-0318","CVE-2022-0319","CVE-2022-0351","CVE-2022-0359","CVE-2022-0361","CVE-2022-0392","CVE-2022-0407","CVE-2022-0413","CVE-2022-0561","CVE-2022-0696","CVE-2022-0778","CVE-2022-1184","CVE-2022-1245","CVE-2022-1271","CVE-2022-1292","CVE-2022-1381","CVE-2022-1420","CVE-2022-1462","CVE-2022-1466","CVE-2022-1471","CVE-2022-1586","CVE-2022-1587","CVE-2022-1616","CVE-2022-1619","CVE-2022-1620","CVE-2022-1679","CVE-2022-1705","CVE-2022-1720","CVE-2022-1729","CVE-2022-1733","CVE-2022-1735","CVE-2022-1771","CVE-2022-1785","CVE-2022-1796","CVE-2022-1851","CVE-2022-1897","CVE-2022-1898","CVE-2022-1927","CVE-2022-1962","CVE-2022-1968","CVE-2022-1974","CVE-2022-1975","CVE-2022-20132","CVE-2022-20141","CVE-2022-20154","CVE-2022-20166","CVE-2022-20368","CVE-2022-20369","CVE-2022-2047","CVE-2022-2048","CVE-2022-20567","CVE-2022-2068","CVE-2022-2097","CVE-2022-21216","CVE-2022-21233","CVE-2022-2124","CVE-2022-2125","CVE-2022-2126","CVE-2022-2129","CVE-2022-21363","CVE-2022-21385","CVE-2022-21499","CVE-2022-2153","CVE-2022-21540","CVE-2022-21541","CVE-2022-21549","CVE-2022-21618","CVE-2022-21619","CVE-2022-21624","CVE-2022-21626","CVE-2022-21628","CVE-2022-21702","CVE-2022-2175","CVE-2022-2182","CVE-2022-2183","CVE-2022-2206","CVE-2022-2207","CVE-2022-2208","CVE-2022-2210","CVE-2022-2231","CVE-2022-2256","CVE-2022-2257","CVE-2022-2264","CVE-2022-2284","CVE-2022-2285","CVE-2022-2286","CVE-2022-2287","CVE-2022-22976","CVE-2022-22978","CVE-2022-2304","CVE-2022-2318","CVE-2022-23302","CVE-2022-23305","CVE-2022-23307","CVE-2022-2343","CVE-2022-2344","CVE-2022-2345","CVE-2022-23471","CVE-2022-23521","CVE-2022-23772","CVE-2022-23773","CVE-2022-24302","CVE-2022-24329","CVE-2022-24823","CVE-2022-24903","CVE-2022-2503","CVE-2022-25147","CVE-2022-25168","CVE-2022-2519","CVE-2022-2520","CVE-2022-2521","CVE-2022-2522","CVE-2022-25647","CVE-2022-2571","CVE-2022-2580","CVE-2022-2581","CVE-2022-25857","CVE-2022-2588","CVE-2022-2598","CVE-2022-26148","CVE-2022-26365","CVE-2022-26373","CVE-2022-2639","CVE-2022-26612","CVE-2022-2663","CVE-2022-27781","CVE-2022-27782","CVE-2022-27943","CVE-2022-2795","CVE-2022-28131","CVE-2022-2816","CVE-2022-2817","CVE-2022-2819","CVE-2022-28327","CVE-2022-2845","CVE-2022-2849","CVE-2022-2862","CVE-2022-2867","CVE-2022-2868","CVE-2022-2869","CVE-2022-28693","CVE-2022-2874","CVE-2022-28748","CVE-2022-2880","CVE-2022-2889","CVE-2022-29162","CVE-2022-29187","CVE-2022-2923","CVE-2022-2946","CVE-2022-29526","CVE-2022-29583","CVE-2022-2964","CVE-2022-2977","CVE-2022-2980","CVE-2022-2982","CVE-2022-29900","CVE-2022-29901","CVE-2022-2991","CVE-2022-3016","CVE-2022-3028","CVE-2022-3037","CVE-2022-30580","CVE-2022-30630","CVE-2022-30631","CVE-2022-30632","CVE-2022-30633","CVE-2022-3099","CVE-2022-31030","CVE-2022-31159","CVE-2022-3134","CVE-2022-3153","CVE-2022-3169","CVE-2022-31690","CVE-2022-32148","CVE-2022-32149","CVE-2022-32206","CVE-2022-32208","CVE-2022-32221","CVE-2022-3234","CVE-2022-3235","CVE-2022-3239","CVE-2022-3278","CVE-2022-3296","CVE-2022-3297","CVE-2022-33196","CVE-2022-3324","CVE-2022-3352","CVE-2022-33740","CVE-2022-33741","CVE-2022-33742","CVE-2022-33972","CVE-2022-33981","CVE-2022-34169","CVE-2022-3424","CVE-2022-34266","CVE-2022-34526","CVE-2022-34903","CVE-2022-3491","CVE-2022-3515","CVE-2022-3520","CVE-2022-3521","CVE-2022-3524","CVE-2022-35252","CVE-2022-3542","CVE-2022-3545","CVE-2022-3564","CVE-2022-3565","CVE-2022-3566","CVE-2022-3567","CVE-2022-35737","CVE-2022-3586","CVE-2022-3591","CVE-2022-3594","CVE-2022-3597","CVE-2022-3599","CVE-2022-36109","CVE-2022-3621","CVE-2022-3626","CVE-2022-3627","CVE-2022-3628","CVE-2022-36280","CVE-2022-3629","CVE-2022-3635","CVE-2022-3643","CVE-2022-36437","CVE-2022-3646","CVE-2022-3649","CVE-2022-36760","CVE-2022-36879","CVE-2022-36946","CVE-2022-3705","CVE-2022-37434","CVE-2022-37436","CVE-2022-37865","CVE-2022-37866","CVE-2022-38090","CVE-2022-38096","CVE-2022-38126","CVE-2022-38127","CVE-2022-38177","CVE-2022-38178","CVE-2022-3821","CVE-2022-38533","CVE-2022-38749","CVE-2022-38750","CVE-2022-38751","CVE-2022-38752","CVE-2022-39028","CVE-2022-3903","CVE-2022-39188","CVE-2022-39399","CVE-2022-3970","CVE-2022-40149","CVE-2022-40150","CVE-2022-40151","CVE-2022-40152","CVE-2022-40153","CVE-2022-40303","CVE-2022-40304","CVE-2022-40307","CVE-2022-40674","CVE-2022-40768","CVE-2022-40899","CVE-2022-4095","CVE-2022-41218","CVE-2022-4129","CVE-2022-4141","CVE-2022-41717","CVE-2022-41721","CVE-2022-41848","CVE-2022-41850","CVE-2022-41854","CVE-2022-41858","CVE-2022-41881","CVE-2022-41903","CVE-2022-41915","CVE-2022-41966","CVE-2022-41974","CVE-2022-42003","CVE-2022-42004","CVE-2022-42010","CVE-2022-42011","CVE-2022-42012","CVE-2022-42328","CVE-2022-42329","CVE-2022-42703","CVE-2022-42889","CVE-2022-42895","CVE-2022-42896","CVE-2022-42898","CVE-2022-4292","CVE-2022-4293","CVE-2022-42969","CVE-2022-4304","CVE-2022-43552","CVE-2022-43680","CVE-2022-43750","CVE-2022-4378","CVE-2022-43945","CVE-2022-43995","CVE-2022-4415","CVE-2022-4450","CVE-2022-44638","CVE-2022-45061","CVE-2022-45688","CVE-2022-45884","CVE-2022-45885","CVE-2022-45886","CVE-2022-45887","CVE-2022-45919","CVE-2022-45934","CVE-2022-45939","CVE-2022-4662","CVE-2022-46751","CVE-2022-46908","CVE-2022-47629","CVE-2022-47929","CVE-2022-48281","CVE-2022-48337","CVE-2022-48339","CVE-2023-0045","CVE-2023-0049","CVE-2023-0051","CVE-2023-0054","CVE-2023-0215","CVE-2023-0286","CVE-2023-0288","CVE-2023-0433","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0512","CVE-2023-0590","CVE-2023-0597","CVE-2023-0833","CVE-2023-1076","CVE-2023-1095","CVE-2023-1118","CVE-2023-1127","CVE-2023-1170","CVE-2023-1175","CVE-2023-1370","CVE-2023-1380","CVE-2023-1390","CVE-2023-1436","CVE-2023-1513","CVE-2023-1611","CVE-2023-1670","CVE-2023-1855","CVE-2023-1989","CVE-2023-1990","CVE-2023-1998","CVE-2023-20862","CVE-2023-2124","CVE-2023-2162","CVE-2023-2176","CVE-2023-21830","CVE-2023-21835","CVE-2023-21843","CVE-2023-21930","CVE-2023-21937","CVE-2023-21938","CVE-2023-21939","CVE-2023-2194","CVE-2023-21954","CVE-2023-21967","CVE-2023-21968","CVE-2023-22490","CVE-2023-2253","CVE-2023-22809","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-23916","CVE-2023-23946","CVE-2023-24329","CVE-2023-24532","CVE-2023-24534","CVE-2023-2483","CVE-2023-24998","CVE-2023-2513","CVE-2023-25193","CVE-2023-25652","CVE-2023-25690","CVE-2023-25809","CVE-2023-25815","CVE-2023-26048","CVE-2023-26049","CVE-2023-2650","CVE-2023-26545","CVE-2023-26604","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27538","CVE-2023-27561","CVE-2023-2828","CVE-2023-28320","CVE-2023-28321","CVE-2023-28322","CVE-2023-28328","CVE-2023-28464","CVE-2023-28486","CVE-2023-28487","CVE-2023-28642","CVE-2023-28772","CVE-2023-28840","CVE-2023-28841","CVE-2023-28842","CVE-2023-29007","CVE-2023-29383","CVE-2023-29402","CVE-2023-29406","CVE-2023-29409","CVE-2023-2976","CVE-2023-30630","CVE-2023-30772","CVE-2023-31084","CVE-2023-3138","CVE-2023-31436","CVE-2023-31484","CVE-2023-32269","CVE-2023-32697","CVE-2023-33264","CVE-2023-34034","CVE-2023-34035","CVE-2023-34453","CVE-2023-34454","CVE-2023-34455","CVE-2023-34462","CVE-2023-35116","CVE-2023-3635","CVE-2023-36479","CVE-2023-39533","CVE-2023-40167","CVE-2023-40217","CVE-2023-41105","CVE-2023-41900","CVE-2023-43642","CVE-2023-43804","CVE-2023-44487","CVE-2023-45803","CVE-2024-21626"]},{"id":"openSUSE-SU-2024:12444-1","title":"python310-ecdsa-0.18.0-1.1 on GA media","vulnerabilityIds":["CVE-2022-0778"]},{"id":"ICSA-22-272-02","title":"Hitachi Energy MicroSCADA Pro X SYS600","vulnerabilityIds":["CVE-2020-25692","CVE-2022-0778"]},{"id":"openSUSE-SU-2025:14965-1","title":"python311-ecdsa-0.19.1-1.1 on GA media","vulnerabilityIds":["CVE-2022-0778"]},{"id":"ICSA-23-143-02","title":"Hitachi Energy's RTU500 Series Product (UPDATE B)","vulnerabilityIds":["CVE-2023-0286","CVE-2022-4304","CVE-2022-23937","CVE-2022-0778","CVE-2021-3711","CVE-2021-3712"]},{"id":"SSA-108696","title":"SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400","vulnerabilityIds":["CVE-2019-19135","CVE-2020-1967","CVE-2020-1971","CVE-2022-0778","CVE-2022-29862"]},{"id":"NCSC-2026-0112","title":"Kwetsbaarheden verholpen in Siemens producten","vulnerabilityIds":["CVE-2020-24588","CVE-2020-26139","CVE-2020-26140","CVE-2020-26141","CVE-2020-26143","CVE-2020-26144","CVE-2020-26146","CVE-2020-26147","CVE-2021-3712","CVE-2022-0778","CVE-2022-31765","CVE-2022-36323","CVE-2022-36324","CVE-2022-36325","CVE-2023-44373","CVE-2025-2884","CVE-2025-6965","CVE-2025-40745","CVE-2026-24032","CVE-2026-25654","CVE-2026-27668","CVE-2026-33892"]},{"id":"SCA-2022-0012","title":"OpenSSL vulnerability affects multiple SICK SIMs","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:0854-1","title":"Security update for openssl","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:0853-1","title":"Security update for openssl-1_1","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1078","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:4956","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes","vulnerabilityIds":["CVE-2021-3918","CVE-2021-41190","CVE-2021-43565","CVE-2021-43816","CVE-2021-43858","CVE-2022-0235","CVE-2022-0778","CVE-2022-21803","CVE-2022-23806","CVE-2022-24450","CVE-2022-24778","CVE-2022-24785","CVE-2022-27191","CVE-2022-29810"]},{"id":"openSUSE-SU-2022:0856-1","title":"Security update for openssl-1_0_0","vulnerabilityIds":["CVE-2022-0778"]},{"id":"ICSA-23-059-01","title":"Hitachi Energy Gateway Station","vulnerabilityIds":["CVE-2020-25692","CVE-2022-0778"]},{"id":"RHSA-2022:1077","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2022-0515","title":"IBM Spectrum Protect: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-25704","CVE-2020-29368","CVE-2020-36322","CVE-2020-36385","CVE-2021-20269","CVE-2021-20321","CVE-2021-20322","CVE-2021-21781","CVE-2021-28950","CVE-2021-28971","CVE-2021-29650","CVE-2021-31916","CVE-2021-35550","CVE-2021-35603","CVE-2021-3573","CVE-2021-3635","CVE-2021-3669","CVE-2021-3764","CVE-2021-38201","CVE-2021-38561","CVE-2021-4002","CVE-2021-4028","CVE-2021-4083","CVE-2021-4154","CVE-2021-4155","CVE-2021-4157","CVE-2021-41864","CVE-2021-4197","CVE-2021-4203","CVE-2021-43565","CVE-2021-44733","CVE-2021-45485","CVE-2021-45486","CVE-2022-0185","CVE-2022-0286","CVE-2022-0492","CVE-2022-0778","CVE-2022-0847","CVE-2022-0850","CVE-2022-1011","CVE-2022-22472","CVE-2022-22474","CVE-2022-22478","CVE-2022-22487","CVE-2022-22494","CVE-2022-22496","CVE-2022-22942","CVE-2022-24675","CVE-2022-24842","CVE-2022-27536","CVE-2022-28327"]},{"id":"SUSE-SU-2022:0935-1","title":"Security update for nodejs12","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1112","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1082","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:0851-1","title":"Security update for openssl-1_1","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1071","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2022-1335","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2018-25032","CVE-2019-19906","CVE-2020-0499","CVE-2020-25717","CVE-2020-29651","CVE-2021-0561","CVE-2021-21708","CVE-2021-22946","CVE-2021-25220","CVE-2021-29923","CVE-2021-30809","CVE-2021-30818","CVE-2021-30823","CVE-2021-30836","CVE-2021-30884","CVE-2021-30887","CVE-2021-30888","CVE-2021-30889","CVE-2021-30890","CVE-2021-30897","CVE-2021-30934","CVE-2021-30936","CVE-2021-30951","CVE-2021-30952","CVE-2021-30953","CVE-2021-30954","CVE-2021-30984","CVE-2021-3448","CVE-2021-34558","CVE-2021-36221","CVE-2021-4115","CVE-2021-4136","CVE-2021-4166","CVE-2021-4173","CVE-2021-41771","CVE-2021-41772","CVE-2021-4187","CVE-2021-4192","CVE-2021-4193","CVE-2021-4217","CVE-2021-43519","CVE-2021-43566","CVE-2021-44142","CVE-2021-45444","CVE-2021-45481","CVE-2021-45482","CVE-2021-45483","CVE-2021-45960","CVE-2021-46143","CVE-2022-0128","CVE-2022-0156","CVE-2022-0158","CVE-2022-0261","CVE-2022-0318","CVE-2022-0319","CVE-2022-0336","CVE-2022-0391","CVE-2022-0408","CVE-2022-0413","CVE-2022-0417","CVE-2022-0443","CVE-2022-0554","CVE-2022-0566","CVE-2022-0572","CVE-2022-0629","CVE-2022-0685","CVE-2022-0696","CVE-2022-0714","CVE-2022-0729","CVE-2022-0778","CVE-2022-1097","CVE-2022-1196","CVE-2022-1197","CVE-2022-1271","CVE-2022-1520","CVE-2022-1834","CVE-2022-21245","CVE-2022-21270","CVE-2022-21291","CVE-2022-21303","CVE-2022-21304","CVE-2022-21344","CVE-2022-21349","CVE-2022-21367","CVE-2022-21426","CVE-2022-21434","CVE-2022-21443","CVE-2022-21449","CVE-2022-21476","CVE-2022-21493","CVE-2022-21494","CVE-2022-21496","CVE-2022-21514","CVE-2022-21524","CVE-2022-21533","CVE-2022-21712","CVE-2022-21716","CVE-2022-22589","CVE-2022-22590","CVE-2022-22592","CVE-2022-22620","CVE-2022-22719","CVE-2022-22720","CVE-2022-22721","CVE-2022-22818","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23308","CVE-2022-23772","CVE-2022-23773","CVE-2022-23806","CVE-2022-23833","CVE-2022-23852","CVE-2022-23943","CVE-2022-23990","CVE-2022-24130","CVE-2022-24407","CVE-2022-24675","CVE-2022-24713","CVE-2022-24801","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-25762","CVE-2022-26381","CVE-2022-26383","CVE-2022-26384","CVE-2022-26386","CVE-2022-26387","CVE-2022-26485","CVE-2022-26486","CVE-2022-28281","CVE-2022-28282","CVE-2022-28285","CVE-2022-28286","CVE-2022-28289","CVE-2022-28327","CVE-2022-28346","CVE-2022-28347","CVE-2022-29824","CVE-2022-29909","CVE-2022-29911","CVE-2022-29912","CVE-2022-29913","CVE-2022-29914","CVE-2022-29916","CVE-2022-29917","CVE-2022-31736","CVE-2022-31737","CVE-2022-31738","CVE-2022-31739","CVE-2022-3174","CVE-2022-31740","CVE-2022-31741","CVE-2022-31742","CVE-2022-31747","CVE-2022-4187"]},{"id":"ICSA-24-046-02","title":"Siemens SIDIS Prime","vulnerabilityIds":["CVE-2019-19135","CVE-2020-1967","CVE-2020-1971","CVE-2022-0778","CVE-2022-29862"]},{"id":"WID-SEC-W-2022-0432","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2016-2124","CVE-2019-14822","CVE-2019-19906","CVE-2020-15250","CVE-2020-17049","CVE-2020-25717","CVE-2020-25718","CVE-2020-25719","CVE-2020-25721","CVE-2020-25722","CVE-2020-9484","CVE-2021-21707","CVE-2021-22926","CVE-2021-23192","CVE-2021-27815","CVE-2021-30846","CVE-2021-30848","CVE-2021-30849","CVE-2021-30851","CVE-2021-30858","CVE-2021-33430","CVE-2021-34141","CVE-2021-35604","CVE-2021-35624","CVE-2021-3572","CVE-2021-3711","CVE-2021-3733","CVE-2021-3737","CVE-2021-3738","CVE-2021-3770","CVE-2021-3778","CVE-2021-3796","CVE-2021-38115","CVE-2021-3872","CVE-2021-3875","CVE-2021-3903","CVE-2021-39212","CVE-2021-39272","CVE-2021-3928","CVE-2021-3968","CVE-2021-3973","CVE-2021-3974","CVE-2021-3984","CVE-2021-39920","CVE-2021-39921","CVE-2021-39922","CVE-2021-39923","CVE-2021-39924","CVE-2021-39925","CVE-2021-39926","CVE-2021-39928","CVE-2021-39929","CVE-2021-4008","CVE-2021-4009","CVE-2021-4010","CVE-2021-4011","CVE-2021-40145","CVE-2021-4019","CVE-2021-4034","CVE-2021-4069","CVE-2021-40812","CVE-2021-41133","CVE-2021-4140","CVE-2021-41495","CVE-2021-41496","CVE-2021-4181","CVE-2021-41817","CVE-2021-41819","CVE-2021-4182","CVE-2021-4183","CVE-2021-4184","CVE-2021-4185","CVE-2021-42717","CVE-2021-42762","CVE-2021-43331","CVE-2021-43332","CVE-2021-43395","CVE-2021-43527","CVE-2021-43528","CVE-2021-43536","CVE-2021-43537","CVE-2021-43538","CVE-2021-43539","CVE-2021-43541","CVE-2021-43542","CVE-2021-43543","CVE-2021-43545","CVE-2021-43546","CVE-2021-43566","CVE-2021-43818","CVE-2021-44142","CVE-2021-44224","CVE-2021-44227","CVE-2021-44420","CVE-2021-44531","CVE-2021-44532","CVE-2021-44533","CVE-2021-44540","CVE-2021-44541","CVE-2021-44542","CVE-2021-44543","CVE-2021-44790","CVE-2021-45078","CVE-2021-45115","CVE-2021-45116","CVE-2021-45452","CVE-2021-45960","CVE-2021-46143","CVE-2022-0336","CVE-2022-0391","CVE-2022-0566","CVE-2022-0581","CVE-2022-0582","CVE-2022-0583","CVE-2022-0585","CVE-2022-0586","CVE-2022-0778","CVE-2022-21248","CVE-2022-21263","CVE-2022-21271","CVE-2022-21282","CVE-2022-21291","CVE-2022-21293","CVE-2022-21294","CVE-2022-21296","CVE-2022-21298","CVE-2022-21299","CVE-2022-21305","CVE-2022-21340","CVE-2022-21341","CVE-2022-21349","CVE-2022-21360","CVE-2022-21365","CVE-2022-21375","CVE-2022-21384","CVE-2022-21416","CVE-2022-21446","CVE-2022-21461","CVE-2022-21463","CVE-2022-21493","CVE-2022-21494","CVE-2022-21712","CVE-2022-21716","CVE-2022-21824","CVE-2022-22719","CVE-2022-22720","CVE-2022-22721","CVE-2022-22737","CVE-2022-22738","CVE-2022-22739","CVE-2022-22740","CVE-2022-22741","CVE-2022-22742","CVE-2022-22743","CVE-2022-22744","CVE-2022-22745","CVE-2022-22746","CVE-2022-22747","CVE-2022-22748","CVE-2022-22751","CVE-2022-22753","CVE-2022-22754","CVE-2022-22756","CVE-2022-22759","CVE-2022-22760","CVE-2022-22761","CVE-2022-22763","CVE-2022-22764","CVE-2022-22815","CVE-2022-22816","CVE-2022-22817","CVE-2022-22818","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23181","CVE-2022-23833","CVE-2022-23852","CVE-2022-23943","CVE-2022-23990","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-26381","CVE-2022-26383","CVE-2022-26384","CVE-2022-26386","CVE-2022-26387","CVE-2022-26485","CVE-2022-26486"]},{"id":"WID-SEC-W-2024-1186","title":"IBM DB2 REST: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-19126","CVE-2020-10029","CVE-2020-1751","CVE-2020-1752","CVE-2021-35942","CVE-2021-3711","CVE-2021-3712","CVE-2021-3999","CVE-2021-4160","CVE-2022-0778","CVE-2022-1292","CVE-2022-2068","CVE-2022-2097","CVE-2023-48795"]},{"id":"SUSE-RU-2022:0861-1","title":"Security update for openssl-1_1 ","vulnerabilityIds":["CVE-2022-0778"]},{"id":"NCSC-2024-0333","title":"Kwetsbaarheden verholpen in SAP producten","vulnerabilityIds":["CVE-2022-0778","CVE-2023-0215","CVE-2023-0286","CVE-2023-30533","CVE-2024-28166","CVE-2024-29415","CVE-2024-33003","CVE-2024-33005","CVE-2024-39591","CVE-2024-41730","CVE-2024-41731","CVE-2024-41732","CVE-2024-41733","CVE-2024-41734","CVE-2024-41735","CVE-2024-41736","CVE-2024-41737","CVE-2024-42373","CVE-2024-42374","CVE-2024-42375","CVE-2024-42376"]},{"id":"RHSA-2022:1520","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.2 Security Update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:0860-1","title":"Security update for openssl-1_1","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SSA-712929","title":"SSA-712929: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2022-0200","title":"Oracle Java SE und OpenJDK: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-0778","CVE-2022-21426","CVE-2022-21434","CVE-2022-21443","CVE-2022-21449","CVE-2022-21476","CVE-2022-21496"]},{"id":"RHSA-2022:1065","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"WID-SEC-W-2023-1969","title":"HPE Fabric OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation","vulnerabilityIds":["CVE-2023-31928","CVE-2023-31927","CVE-2023-31926","CVE-2023-31432","CVE-2023-31431","CVE-2023-31430","CVE-2023-31429","CVE-2023-31428","CVE-2023-31427","CVE-2023-31426","CVE-2023-31425","CVE-2022-44792","CVE-2022-3786","CVE-2022-3602","CVE-2022-29154","CVE-2022-28615","CVE-2022-28614","CVE-2022-25313","CVE-2022-25236","CVE-2022-25235","CVE-2022-24448","CVE-2022-23219","CVE-2022-2097","CVE-2022-2068","CVE-2022-0778","CVE-2022-0322","CVE-2022-0155","CVE-2021-45486","CVE-2021-45485","CVE-2021-41617","CVE-2021-4145","CVE-2021-39275","CVE-2021-3800","CVE-2021-20193","CVE-2021-0146","CVE-2020-36558","CVE-2020-36557","CVE-2020-15861","CVE-2020-14145","CVE-2019-0220","CVE-2018-7738","CVE-2018-25032","CVE-2018-14404","CVE-2018-14348","CVE-2018-0739","CVE-2014-2524","CVE-2012-0060","CVE-2011-4917"]},{"id":"RHSA-2022:1389","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP11 security update","vulnerabilityIds":["CVE-2021-3516","CVE-2021-3517","CVE-2021-3518","CVE-2021-3537","CVE-2021-3541","CVE-2022-0778","CVE-2022-22720","CVE-2022-23308"]},{"id":"SSA-028723","title":"SSA-028723: Multiple OpenSSL Vulnerabilities in BFCClient Before V2.17","vulnerabilityIds":["CVE-2021-3711","CVE-2021-3712","CVE-2022-0778","CVE-2023-0286","CVE-2023-0464"]},{"id":"WID-SEC-W-2022-0065","title":"OpenSSL: Schwachstelle ermöglicht Denial of Service","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1076","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1091","title":"Red Hat Security Advisory: openssl security update","vulnerabilityIds":["CVE-2022-0778"]},{"id":"SUSE-SU-2022:0861-1","title":"Security update for openssl-1_1 ","vulnerabilityIds":["CVE-2022-0778"]},{"id":"openSUSE-SU-2024:11944-1","title":"libcrypto47-3.4.3-1.1 on GA media","vulnerabilityIds":["CVE-2022-0778"]},{"id":"NCSC-2024-0239","title":"Kwetsbaarheden verholpen in Solarwinds Platform","vulnerabilityIds":["CVE-2017-3736","CVE-2018-0732","CVE-2018-0737","CVE-2019-1559","CVE-2020-1971","CVE-2021-3712","CVE-2021-4321","CVE-2021-23840","CVE-2022-0778","CVE-2023-0215","CVE-2023-0286","CVE-2024-28996","CVE-2024-28999","CVE-2024-29004"]},{"id":"WID-SEC-W-2026-0180","title":"Dell Data Protection Advisor: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2009-2625","CVE-2010-4252","CVE-2010-5298","CVE-2011-1473","CVE-2011-1945","CVE-2012-0027","CVE-2012-0213","CVE-2012-0881","CVE-2012-6153","CVE-2013-0166","CVE-2013-0169","CVE-2013-4002","CVE-2013-4366","CVE-2013-7285","CVE-2014-0076","CVE-2014-0114","CVE-2014-0195","CVE-2014-0221","CVE-2014-0224","CVE-2014-3470","CVE-2014-3488","CVE-2014-3490","CVE-2014-3505","CVE-2014-3506","CVE-2014-3507","CVE-2014-3510","CVE-2014-3529","CVE-2014-3558","CVE-2014-3566","CVE-2014-3567","CVE-2014-3568","CVE-2014-3570","CVE-2014-3571","CVE-2014-3572","CVE-2014-3574","CVE-2014-3623","CVE-2014-7839","CVE-2014-8122","CVE-2014-8125","CVE-2014-8176","CVE-2014-8275","CVE-2014-9527","CVE-2015-0204","CVE-2015-0209","CVE-2015-0286","CVE-2015-0287","CVE-2015-0288","CVE-2015-0289","CVE-2015-0292","CVE-2015-0293","CVE-2015-1788","CVE-2015-1789","CVE-2015-1790","CVE-2015-1791","CVE-2015-1792","CVE-2015-2156","CVE-2015-3158","CVE-2015-3195","CVE-2015-4000","CVE-2015-5241","CVE-2015-5253","CVE-2016-0703","CVE-2016-0704","CVE-2016-0750","CVE-2016-2105","CVE-2016-2106","CVE-2016-2107","CVE-2016-2108","CVE-2016-2109","CVE-2016-2141","CVE-2016-2176","CVE-2016-2177","CVE-2016-2178","CVE-2016-2179","CVE-2016-2180","CVE-2016-2181","CVE-2016-2182","CVE-2016-2183","CVE-2016-2510","CVE-2016-3674","CVE-2016-4606","CVE-2016-4802","CVE-2016-5000","CVE-2016-5419","CVE-2016-5420","CVE-2016-5421","CVE-2016-6302","CVE-2016-6303","CVE-2016-6304","CVE-2016-6345","CVE-2016-6346","CVE-2016-6347","CVE-2016-6348","CVE-2016-6812","CVE-2016-7056","CVE-2016-7141","CVE-2016-7167","CVE-2016-8610","CVE-2016-8615","CVE-2016-8616","CVE-2016-8617","CVE-2016-8618","CVE-2016-8619","CVE-2016-8620","CVE-2016-8621","CVE-2016-8622","CVE-2016-8623","CVE-2016-8624","CVE-2016-8625","CVE-2016-8739","CVE-2016-9586","CVE-2016-9594","CVE-2016-9840","CVE-2016-9841","CVE-2016-9842","CVE-2016-9843","CVE-2016-9878","CVE-2016-9952","CVE-2016-9953","CVE-2017-1000100","CVE-2017-1000101","CVE-2017-1000207","CVE-2017-1000208","CVE-2017-1000254","CVE-2017-1000257","CVE-2017-1000487","CVE-2017-12626","CVE-2017-15089","CVE-2017-15095","CVE-2017-17485","CVE-2017-2629","CVE-2017-2638","CVE-2017-3156","CVE-2017-3735","CVE-2017-3737","CVE-2017-5644","CVE-2017-5662","CVE-2017-5929","CVE-2017-7525","CVE-2017-7957","CVE-2017-8816","CVE-2017-8817","CVE-2017-9502","CVE-2018-1000007","CVE-2018-1000120","CVE-2018-1000121","CVE-2018-1000122","CVE-2018-1000301","CVE-2018-1000632","CVE-2018-1002200","CVE-2018-10237","CVE-2018-11307","CVE-2018-11771","CVE-2018-12022","CVE-2018-1275","CVE-2018-14371","CVE-2018-14618","CVE-2018-14718","CVE-2018-14719","CVE-2018-14720","CVE-2018-14721","CVE-2018-16839","CVE-2018-16842","CVE-2018-16890","CVE-2018-19360","CVE-2018-19361","CVE-2018-19362","CVE-2018-25032","CVE-2018-8013","CVE-2018-8039","CVE-2019-10086","CVE-2019-10158","CVE-2019-10173","CVE-2019-10174","CVE-2019-10219","CVE-2019-12086","CVE-2019-12384","CVE-2019-12406","CVE-2019-12415","CVE-2019-12419","CVE-2019-12423","CVE-2019-12814","CVE-2019-14379","CVE-2019-14439","CVE-2019-14540","CVE-2019-14892","CVE-2019-14893","CVE-2019-1559","CVE-2019-16168","CVE-2019-16335","CVE-2019-16942","CVE-2019-16943","CVE-2019-17091","CVE-2019-17267","CVE-2019-17531","CVE-2019-17566","CVE-2019-17573","CVE-2019-19645","CVE-2019-19646","CVE-2019-20330","CVE-2019-3822","CVE-2019-3823","CVE-2019-5427","CVE-2019-5436","CVE-2019-5443","CVE-2019-5482","CVE-2020-10650","CVE-2020-10673","CVE-2020-10969","CVE-2020-11655","CVE-2020-11656","CVE-2020-11979","CVE-2020-11987","CVE-2020-13434","CVE-2020-13435","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632","CVE-2020-13954","CVE-2020-14297","CVE-2020-15250","CVE-2020-15358","CVE-2020-1945","CVE-2020-1954","CVE-2020-1968","CVE-2020-24025","CVE-2020-24616","CVE-2020-24750","CVE-2020-25711","CVE-2020-26217","CVE-2020-26258","CVE-2020-26259","CVE-2020-28499","CVE-2020-35490","CVE-2020-35491","CVE-2020-35728","CVE-2020-36179","CVE-2020-36180","CVE-2020-36181","CVE-2020-36182","CVE-2020-36183","CVE-2020-36184","CVE-2020-36185","CVE-2020-36186","CVE-2020-36187","CVE-2020-36188","CVE-2020-36189","CVE-2020-6950","CVE-2020-8177","CVE-2020-8231","CVE-2020-8284","CVE-2020-8285","CVE-2020-8286","CVE-2020-8840","CVE-2020-9546","CVE-2020-9547","CVE-2020-9548","CVE-2021-20190","CVE-2021-20250","CVE-2021-21341","CVE-2021-21342","CVE-2021-21343","CVE-2021-21344","CVE-2021-21345","CVE-2021-21346","CVE-2021-21347","CVE-2021-21348","CVE-2021-21349","CVE-2021-21350","CVE-2021-21351","CVE-2021-21363","CVE-2021-21364","CVE-2021-22570","CVE-2021-22876","CVE-2021-22898","CVE-2021-22922","CVE-2021-22923","CVE-2021-22924","CVE-2021-22925","CVE-2021-22926","CVE-2021-22946","CVE-2021-22947","CVE-2021-23839","CVE-2021-23840","CVE-2021-23841","CVE-2021-23926","CVE-2021-27568","CVE-2021-29425","CVE-2021-29505","CVE-2021-33813","CVE-2021-35515","CVE-2021-35516","CVE-2021-35517","CVE-2021-36090","CVE-2021-36373","CVE-2021-3712","CVE-2021-39139","CVE-2021-39140","CVE-2021-39141","CVE-2021-39144","CVE-2021-39145","CVE-2021-39146","CVE-2021-39147","CVE-2021-39148","CVE-2021-39149","CVE-2021-39150","CVE-2021-39151","CVE-2021-39152","CVE-2021-39153","CVE-2021-39154","CVE-2021-4044","CVE-2021-42550","CVE-2021-43859","CVE-2022-0084","CVE-2022-0778","CVE-2022-22576","CVE-2022-25758","CVE-2022-25883","CVE-2022-25927","CVE-2022-26336","CVE-2022-27774","CVE-2022-27776","CVE-2022-27781","CVE-2022-27782","CVE-2022-32206","CVE-2022-32208","CVE-2022-32221","CVE-2022-33987","CVE-2022-3509","CVE-2022-3510","CVE-2022-35252","CVE-2022-35737","CVE-2022-37434","CVE-2022-38778","CVE-2022-38900","CVE-2022-40151","CVE-2022-41704","CVE-2022-41940","CVE-2022-41966","CVE-2022-4244","CVE-2022-4245","CVE-2022-42890","CVE-2022-43552","CVE-2022-44729","CVE-2022-44730","CVE-2022-45688","CVE-2023-0842","CVE-2023-1370","CVE-2023-20860","CVE-2023-26136","CVE-2023-26159","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27538","CVE-2023-28319","CVE-2023-28320","CVE-2023-28321","CVE-2023-28322","CVE-2023-31125","CVE-2023-32697","CVE-2023-35116","CVE-2023-37460","CVE-2023-38546","CVE-2023-44270","CVE-2023-45133","CVE-2023-45853","CVE-2023-46218","CVE-2023-7104","CVE-2024-22243","CVE-2024-51127","CVE-2024-7264","CVE-2025-31257","CVE-2025-53057","CVE-2025-53066","CVE-2025-61748","CVE-2025-61755"]},{"id":"ICSA-22-132-02","title":"Mitsubishi Electric MELSOFT iQ AppPortal","vulnerabilityIds":["CVE-2020-13938","CVE-2021-26691","CVE-2021-34798","CVE-2021-3711","CVE-2021-44790","CVE-2022-22720","CVE-2022-23943","CVE-2022-0778"]},{"id":"SUSE-SU-2022:0857-1","title":"Security update for openssl-1_0_0","vulnerabilityIds":["CVE-2022-0778"]},{"id":"RHSA-2022:1476","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.3 security updates and bug fixes","vulnerabilityIds":["CVE-2021-23518","CVE-2021-23566","CVE-2021-41190","CVE-2021-43565","CVE-2022-0144","CVE-2022-0155","CVE-2022-0235","CVE-2022-0536","CVE-2022-0778","CVE-2022-24450","CVE-2022-24778","CVE-2022-27191"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2022-1575","identifiers":["EUVD-2022-1575","CVE-2022-0778","GHSA-x3mh-jvjw-3xwx"]},"retained":false,"historicalAffected":[]},{"revision":"d1b79d6f27ca49ea9b51c6a4e7924a21","observedAt":"2026-10-24T19:17:37.358+00:00","statement":{"source":"nvd","id":"CVE-2022-0778","aliases":[],"title":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in c…","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","state":0,"publishedAt":"2022-03-15T17:15:08.513+00:00","modifiedAt":"2026-10-14T13:17:14.377+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"},{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"},{"system":"CVSS 2.0 · nvd@nist.gov · Primary","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","score":5,"severity":"MEDIUM"}],"references":["http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20220321-0002/","https://security.netapp.com/advisory/ntap-20220429-0005/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://www.debian.org/security/2022/dsa-5103","https://www.openssl.org/news/secadv/20220315.txt","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.tenable.com/security/tns-2022-06","https://www.tenable.com/security/tns-2022-07","https://www.tenable.com/security/tns-2022-08","https://www.tenable.com/security/tns-2022-09","https://cert-portal.siemens.com/productcert/html/ssa-019200.html","https://cert-portal.siemens.com/productcert/html/ssa-028723.html","https://cert-portal.siemens.com/productcert/html/ssa-108696.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-712929.html"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-0778","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-835"],"productCriteria":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*","cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*","cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*"],"sourceDates":{"published":"2022-03-15T17:15:08.513","lastModified":"2026-10-14T13:17:14.377"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2022-0778","identifiers":["CVE-2022-0778"]},"retained":false,"historicalAffected":[]},{"revision":"75d79f11e4904d1ab9046ba3cbf1694e","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"GHSA-x3mh-jvjw-3xwx","aliases":["BIT-mariadb-2022-0778","BIT-mariadb-min-2022-0778","BIT-mysql-client-2022-0778","BIT-node-2022-0778","BIT-node-min-2022-0778","CVE-2022-0778","RUSTSEC-2022-0014"],"title":"openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).","state":0,"publishedAt":"2022-03-16T00:00:45+00:00","modifiedAt":"2026-09-10T03:49:28.4410642+00:00","affected":[{"ecosystem":"crates.io","name":"openssl-src","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"300.0.0"},{"kind":"fixed","version":"300.0.5"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"crates.io","name":"openssl-src","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"111.18.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-0778","https://rustsec.org/advisories/RUSTSEC-2022-0014.html","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20220321-0002","https://security.netapp.com/advisory/ntap-20220429-0005","https://security.netapp.com/advisory/ntap-20240621-0006","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://www.debian.org/security/2022/dsa-5103","https://www.openssl.org/news/secadv/20220315.txt","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.tenable.com/security/tns-2022-06","https://www.tenable.com/security/tns-2022-07","https://www.tenable.com/security/tns-2022-08","https://www.tenable.com/security/tns-2022-09","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ","https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38"],"sourceUrl":"https://github.com/advisories/GHSA-x3mh-jvjw-3xwx","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-x3mh-jvjw-3xwx","identifiers":["GHSA-x3mh-jvjw-3xwx","BIT-mariadb-2022-0778","BIT-mariadb-min-2022-0778","BIT-mysql-client-2022-0778","BIT-node-2022-0778","BIT-node-min-2022-0778","CVE-2022-0778","RUSTSEC-2022-0014"]},"retained":false,"historicalAffected":[]},{"revision":"765004c75590471eb1853b2146bc7578","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2022-0014","aliases":["BIT-mariadb-2022-0778","BIT-mariadb-min-2022-0778","BIT-mysql-client-2022-0778","BIT-node-2022-0778","BIT-node-min-2022-0778","CVE-2022-0778","GHSA-x3mh-jvjw-3xwx"],"title":"Infinite loop in `BN_mod_sqrt()` reachable when parsing certificates","description":"The `BN_mod_sqrt()` function, which computes a modular square root, contains\na bug that can cause it to loop forever for non-prime moduli.\n\nInternally this function is used when parsing certificates that contain\nelliptic curve public keys in compressed form or explicit elliptic curve\nparameters with a base point encoded in compressed form.\n\nIt is possible to trigger the infinite loop by crafting a certificate that\nhas invalid explicit curve parameters.\n\nSince certificate parsing happens prior to verification of the certificate\nsignature, any process that parses an externally supplied certificate may thus\nbe subject to a denial of service attack. The infinite loop can also be\nreached when parsing crafted private keys as they can contain explicit\nelliptic curve parameters.\n\nThus vulnerable situations include:\n\n - TLS clients consuming server certificates\n - TLS servers consuming client certificates\n - Hosting providers taking certificates or private keys from customers\n - Certificate authorities parsing certification requests from subscribers\n - Anything else which parses ASN.1 elliptic curve parameters\n\nAlso any other applications that use the `BN_mod_sqrt()` where the attacker\ncan control the parameter values are vulnerable to this DoS issue.","state":0,"publishedAt":"2022-03-15T12:00:00+00:00","modifiedAt":"2025-06-10T12:59:30.551888+00:00","affected":[{"ecosystem":"crates.io","name":"openssl-src","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"111.18.0"},{"kind":"introduced","version":"300.0.0"},{"kind":"fixed","version":"300.0.5"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/openssl-src","https://rustsec.org/advisories/RUSTSEC-2022-0014.html","https://www.openssl.org/news/secadv/20220315.txt"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2022-0014","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2022-0014","identifiers":["RUSTSEC-2022-0014","BIT-mariadb-2022-0778","BIT-mariadb-min-2022-0778","BIT-mysql-client-2022-0778","BIT-node-2022-0778","BIT-node-min-2022-0778","CVE-2022-0778","GHSA-x3mh-jvjw-3xwx"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T04:04:18.1997683+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T04:04:18.1997683+00:00","lastSuccessAt":"2026-11-10T04:04:18.3995607+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.3995615+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-81377d708f64394c8eb9b62eea2364ac8dfdeb35ef3610cd5a031d185fc8d86c","complete":true,"records":421867,"lastAttemptAt":"2026-11-10T04:02:14.3050104+00:00","lastSuccessAt":"2026-11-10T04:02:14.2925615+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:02:14.3050104+00:00","snapshotPublishedAt":"2026-11-10T03:29:16+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-a6dc967b5ceb4c488191e8f172ded5d6","complete":true,"records":13689,"lastAttemptAt":"2026-11-10T04:04:46.1001793+00:00","lastSuccessAt":"2026-11-10T03:04:49.903+00:00","error":null,"lastVerifiedAt":"2026-11-10T03:04:49.903+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T04:04:18.1997683+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T04:04:18.1997683+00:00","lastSuccessAt":"2026-11-10T04:04:18.4004514+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.4004518+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-f1b5e07abe344673a8a286f3a893260c","complete":true,"records":13695,"lastAttemptAt":"2026-11-10T04:04:45.5033554+00:00","lastSuccessAt":"2026-11-10T04:04:45.5+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:45.5+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T04:04:18.0453993+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.0453993+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T04:02:14.457245+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:02:14.457245+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-761ecc9061239b0da572dc9254c6f384c1d19339eb08408c436647a2f26129e9","complete":true,"records":3064,"lastAttemptAt":"2026-11-10T04:04:18.158124+00:00","lastSuccessAt":"2026-11-09T17:05:03.4044794+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:18.158124+00:00","snapshotPublishedAt":"2026-11-09T16:33:20+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-b6d0179d32e97744f004c83c309b7506438ee50743f2ae97e00ea061ef80ca4a","complete":true,"records":231582,"lastAttemptAt":"2026-11-10T04:04:16.4553373+00:00","lastSuccessAt":"2026-11-10T04:04:14.8073774+00:00","error":null,"lastVerifiedAt":"2026-11-10T04:04:16.4553373+00:00","snapshotPublishedAt":"2026-11-10T03:33:17+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}