Description
OpenSSL 中存在一个命令注入漏洞。该漏洞是由于应用程序对 shell 元字符的验证不当导致的。
OpenSSL c_rehash Script CVE-2022-2068 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.venustech.com.cn/new_type/aqtg/20220628/24161.html
https://www.tenablecloud.cn/plugins/nessus/162419
https://avd.aliyun.com/detail?id=AVD-2022-2068
https://www.dell.com/support/kbdoc/zh-cn/000204221/powerprotect-dp-series-appliance-and-idpa-multiple-suse-vulnerabilities-detected-on-version-2-7-2
https://suse.org.cn/%E6%9B%B4%E6%96%B0%E9%80%9A%E5%91%8A/2022/06/29/OpenSSL-Squid-%E5%92%8C-Dracut-%E5%9C%A8-Tumbleweed-%E4%B8%AD%E6%9B%B4%E6%96%B0.html
https://ask.csdn.net/questions/8108187
https://www.colasoft.com.cn/wp-content/uploads/2023/07/%E7%A7%91%E6%9D%A5%E3%80%8A%E7%BD%91%E7%BB%9C%E9%80%9A%E5%AE%88%E5%9B%BE2023%E7%89%88%E3%80%8B.pdf
https://www.sentinelone.com/vulnerability-database/cve-2022-2068/
https://nvd.nist.gov/vuln/detail/CVE-2022-2068
https://access.redhat.com/security/cve/cve-2022-2068
https://www.rapid7.com/db/vulnerabilities/http-openssl-cve-2022-2068/
https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2023-023-openssl-c-rehash-script-cve-2022-2068/ba-p/94690
https://linux.oracle.com/cve/CVE-2022-2068.html
https://my.f5.com/manage/s/article/K21600298
https://www.twingate.com/blog/tips/cve-2022-2068
https://github.com/NVIDIA/gpu-operator/issues/1037
https://community.freepbx.org/t/any-solution-to-cve-2022-2068-openssl-exploit/87398