OpenSSL c_rehash脚本命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.openssl.org/news/secadv/20220621.txt
• https://www.sentinelone.com/vulnerability-database/cve-2022-2068/
• https://vulnerability.circl.lu/vuln/rhsa-2022:8913
• https://jvn.jp/vu/JVNVU92867820/index.html
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-2068
• https://vulnerability.circl.lu/vuln/suse-su-2022:2182-1
• https://openssl-library.org/news/secadv/20220621.txt
• https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:CTS:OPENSSL-REHASH-CMD-INJ.html
• https://mta.openssl.org/pipermail/openssl-announce/2022-June/000228.html

Related Vulnerabilities

• PoCwp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path Disclosure
• H3C SSL VPN 安全漏洞
• AllinSSL存在默认口令
• CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read
• PoCCVE-2014-0160: OpenSSL Heartbleed Vulnerability
• PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer Overflow
• PoCCVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting
• PoCCVE-2022-29383: NETGEAR ProSafe SSL VPN firmware - SQL Injection
• PoCCVE-2022-35416: H3C SSL VPN <=2022-07-10 - Cross-Site Scripting
• PoCCVE-2024-53704: SSL VPN Session Hijacking
• PoCssl-cert-renewal: SSL/TLS Certificates in AWS IAM about to expire in 30 days