● CVE — High
CVE-2022-1292
Vendordebian, netapp, openssl, siemensProductdebian linux, h300e firmware, h300s firmware, h410s firmware, h500e firmware, h500s firmware, h700e firmware, h700s firmware, clustered data ontap, active iq unified manager, oncommand insight, oncommand workflow automation, snapcenter, snapmanager, openssl, santricity smi-s provider, smi-s provider, clustered data ontap antivirus connector, solidfire & hci management node, a700s firmware, solidfire, enterprise sds & hci storage node, aff 8300 firmware, aff 8700 firmware, fas 8300 firmware, brownfield connectivity gatewayDiscoveredMay 3, 2022UpdatedNov 3, 2026
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).