CVE-2022-1292criticalCWE-78

CVE-2022-1292: critical vulnerability in OpenSSL

The c_rehash script allows command injection

Published · Updated

Follow this CVE+ Monitor OpenSSL+ Monitor openssl

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

72Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 83%
from disclosure to weapon21 days
Published on NVDMay 3
1st PoC+21d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
7 products (26 components)
Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9 · Red Hat Virtualization 4 · and others 2
workaround: As mentioned in the upstream security advisory, use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool.
Fixed
19 products (144 components)
Red Hat Enterprise Linux BaseOS (v. 8) · Red Hat Enterprise Linux BaseOS (v. 9) · Red Hat Enterprise Linux AppStream (v. 9) · Red Hat JBoss Core Services on RHEL 8 · Satellite Client 6 for RHEL 7 · and others 14
fix ↗
Not affected
13 products (2,329 components) — because the vulnerable code is not present in the product
Red Hat Satellite 6.14 for RHEL 8 · Red Hat JBoss Core Services on RHEL 8 · Red Hat Satellite 6.13 for RHEL 8 · Red Hat JBoss Core Services on RHEL 7 Server · Satellite Client 6 for RHEL 8 · and others 8
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
OpenSSL · OpenSSL
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — OpenSSL

In the same product, most dangerous first.

CVE-2022-2068CRITICALThe c_rehash script allows command injectionEPSS 96.4%CVE-2022-3786HIGHX.509 Email Address Variable Length Buffer OverflowEPSS 92.5%CVE-2022-3602HIGHX.509 Email Address 4-byte Buffer OverflowEPSS 90.8%CVE-2021-3711—SM2 Decryption Buffer OverflowEPSS 87.8%CVE-2023-2650MEDIUMPossible DoS translating ASN.1 object identifiersEPSS 75.4%CVE-2025-15467HIGHStack buffer overflow in CMS (Auth)EnvelopedData parsingEPSS 74.8%