{"action":"Upgrade openssl-src to 111.18.0 or later.","affected":[{"fixed":"300.0.5","introduced":"300.0.0"},{"fixed":"111.18.0","introduced":"0"}],"component":"openssl-src","cve_ids":["CVE-2022-0778"],"ecosystem":"crates.io","epss":0.73188,"exploited":false,"fixed_versions":["300.0.5","111.18.0"],"ghsa_id":"GHSA-x3mh-jvjw-3xwx","id":"tcs_01M5KF4ENSSWN3XMDZN2HWC6DY","modified_at":"2026-09-10T03:49:28.441064213Z","published_at":"2022-03-16T00:00:45Z","references":["https://osv.dev/vulnerability/GHSA-x3mh-jvjw-3xwx","https://nvd.nist.gov/vuln/detail/CVE-2022-0778","https://rustsec.org/advisories/RUSTSEC-2022-0014.html","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20220321-0002","https://security.netapp.com/advisory/ntap-20220429-0005","https://security.netapp.com/advisory/ntap-20240621-0006","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://www.debian.org/security/2022/dsa-5103","https://www.openssl.org/news/secadv/20220315.txt","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.tenable.com/security/tns-2022-06","https://www.tenable.com/security/tns-2022-07","https://www.tenable.com/security/tns-2022-08","https://www.tenable.com/security/tns-2022-09","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ","https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x3mh-jvjw-3xwx","url":"https://osv.dev/vulnerability/GHSA-x3mh-jvjw-3xwx"}],"summary":"openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates"}