--- id: CVE-2022-2068 title: >- In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review summary: >- In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When… severity: high cvss: 7.3 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H' cwe: - CWE-78 - CWE-78 vendor: openssl product: openssl affected: - 'openssl >= 1.0.2, < 1.0.2zf' - 'openssl >= 1.1.1, < 1.1.1p' - 'openssl >= 3.0.0, < 3.0.4' - debian_linux = 10.0 - debian_linux = 11.0 - fedora = 35 - fedora = 36 - sinec_ins < 1.0 - sinec_ins = 1.0 - element_software - hci_management_node - ontap_antivirus_connector - ontap_select_deploy_administration_utility - santricity_smi-s_provider - smi-s_provider - snapmanager - solidfire - bootstrap_os - h615c_firmware - h610s_firmware - h610c_firmware - h410c_firmware - h300s_firmware - h500s_firmware - h700s_firmware - h410s_firmware - fas_8300_firmware - fas_8700_firmware - fas_a400_firmware - aff_8300_firmware - aff_8700_firmware - aff_a400_firmware - sannav patched: - openssl 3.0.4 - sinec_ins 1.0 published: '2022-06-21' updated: '2026-10-14' sourceUpdated: '2026-10-14T13:17:20.110' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-2068' references: - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf' label: openssl-security@openssl.org - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa label: openssl-security@openssl.org - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9 label: openssl-security@openssl.org - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7 label: openssl-security@openssl.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/ label: openssl-security@openssl.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ label: openssl-security@openssl.org - url: 'https://security.netapp.com/advisory/ntap-20220707-0008/' label: openssl-security@openssl.org - url: 'https://www.debian.org/security/2022/dsa-5169' label: openssl-security@openssl.org - url: 'https://www.openssl.org/news/secadv/20220621.txt' label: openssl-security@openssl.org - url: 'http://seclists.org/fulldisclosure/2024/Nov/0' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9 label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7 label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/ label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20220707-0008/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.debian.org/security/2022/dsa-5169' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.openssl.org/news/secadv/20220621.txt' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-146325.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-332410.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e tags: - nvd epss: 0.95404 epssPercentile: 0.99869 ingestedAt: '2026-10-14T13:30:58.413Z' --- ## Overview In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). ## Affected - `openssl >= 1.0.2, < 1.0.2zf` - `openssl >= 1.1.1, < 1.1.1p` - `openssl >= 3.0.0, < 3.0.4` - `debian_linux = 10.0` - `debian_linux = 11.0` - `fedora = 35` - `fedora = 36` - `sinec_ins < 1.0` - `sinec_ins = 1.0` - `element_software` - `hci_management_node` - `ontap_antivirus_connector` - `ontap_select_deploy_administration_utility` - `santricity_smi-s_provider` - `smi-s_provider` - `snapmanager` - `solidfire` - `bootstrap_os` - `h615c_firmware` - `h610s_firmware` - `h610c_firmware` - `h410c_firmware` - `h300s_firmware` - `h500s_firmware` - `h700s_firmware` - `h410s_firmware` - `fas_8300_firmware` - `fas_8700_firmware` - `fas_a400_firmware` - `aff_8300_firmware` - `aff_8700_firmware` - `aff_a400_firmware` - `sannav` ## Remediation Upgrade past the affected range: - `openssl 3.0.4` - `sinec_ins 1.0`