Description
OpenSSL库中存在拒绝服务漏洞。该漏洞是由于BN_mod_sqrt()函数中的验证不足导致的。
OpenSSL Elliptic Curve Public Key Handling拒绝服务漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2022-0778
https://explore.alas.aws.amazon.com/CVE-2022-0778.html
https://www.sonicwall.com/blog/openssl-elliptic-curve-public-key-denial-of-service
https://thehackernews.com/2022/03/new-infinite-loop-bug-in-openssl-could.html
https://www.openssl.org/news/secadv/20220315.txt
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://security.gentoo.org/glsa/202210-02
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html