{"action":"Upgrade openssl-src to 300.0.9 or later.","affected":[{"fixed":"300.0.9","introduced":"300.0.8"}],"component":"openssl-src","cve_ids":["CVE-2022-2274"],"ecosystem":"crates.io","epss":0.48234,"exploited":false,"fixed_versions":["300.0.9"],"ghsa_id":"GHSA-735f-pg76-fxc4","id":"tcs_01M5KETYHHM8821N6SYKBYPY9P","modified_at":"2023-11-08T04:08:13.343319Z","published_at":"2022-07-02T00:00:29Z","references":["https://osv.dev/vulnerability/GHSA-735f-pg76-fxc4","https://nvd.nist.gov/vuln/detail/CVE-2022-2274","https://github.com/openssl/openssl/issues/18625","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4d8a88c134df634ba610ff8db1eb8478ac5fd345","https://rustsec.org/advisories/RUSTSEC-2022-0033.html","https://security.netapp.com/advisory/ntap-20220715-0010","https://www.openssl.org/news/secadv/20220705.txt"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-735f-pg76-fxc4","url":"https://osv.dev/vulnerability/GHSA-735f-pg76-fxc4"}],"summary":"openssl-src heap memory corruption with RSA private key operation"}