Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 1 min 173 bronnen 2 kritiek 21 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2022-2274

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-787

Beschrijving

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.

Vendors

Openssl Netapp

Affected products

Openssl Snapcenter H410c Firmware H410c H300s Firmware H300s H500s Firmware H500s H700s Firmware H700s H410s Firmware H410s

References