🛡️ CVE-2022-0778 — 500f-firmware
Description
openssl-src's infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc).
How this vulnerability can be exploited
This issue can be reached over the network, attack complexity is low, an attacker needs no privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality none, integrity none, availability high.
CVSS metrics in full
The score comes from this vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Attack vector: Network — reachable from anywhere that can route to the service.
- Attack complexity: Low — the attack works reliably, with no preparation.
- Privileges required: None — an unauthenticated stranger can try it.
- User interaction: None — nobody has to be tricked into anything.
- Scope: Unchanged — the damage stays inside the vulnerable component.
- Confidentiality impact: None.
- Integrity impact: None.
- Availability impact: High — total loss, or loss the attacker controls.
Weakness class
CVE-2022-0778 is classified as CWE-835: Infinite Loop. A loop condition can never become false for some inputs, hanging the process.
Affected software
CVE-2022-0778 is recorded against 18 packages.
- 500f-firmware
- a250-firmware
- cloud-volumes-ontap-mediator
- clustered-data-ontap
- clustered-data-ontap-antivirus-connector
- debian-linux
- fedora
- mariadb
- mariadb-min
- mysql-client
- nessus (from 10.0.0 up to 10.1.2)
- node
- node-min
- node.js (from 17.0.0 up to 17.7.2)
- openssl (from 3.0.0 up to 3.0.2)
- openssl-src
- santricity-smi-s-provider
- storagegrid
Timeline and source
Published on 15 March 2022 and last revised on 17 June 2026. No public exploit is currently recorded for this entry. Record sourced from NVD.
References
packetstormsecurity.com
seclists.org
seclists.org
seclists.org
cert-portal.siemens.com
git.openssl.org
git.openssl.org
git.openssl.org
lists.debian.org
lists.debian.org
lists.fedoraproject.org
lists.fedoraproject.org
lists.fedoraproject.org
psirt.global.sonicwall.com
security.gentoo.org
security.netapp.com
security.netapp.com
security.netapp.com
support.apple.com
support.apple.com
support.apple.com
www.debian.org
www.openssl.org
www.oracle.com
www.oracle.com
www.tenable.com
www.tenable.com
www.tenable.com
www.tenable.com
packetstormsecurity.com
seclists.org
seclists.org
seclists.org
cert-portal.siemens.com
git.openssl.org
git.openssl.org
git.openssl.org
lists.debian.org
lists.debian.org
lists.fedoraproject.org
Other advisories for this package
500f-firmware has other advisories on record. If you are patching this one, these are worth checking on the same host:
- CVE-2024-6119 (7.5 High, published 3 Sep 2024)
- CVE-2024-6387 (8.1 High, published 1 Jul 2024)
- CVE-2024-1086 (7.8 High, published 31 Jan 2024)
- CVE-2023-25136 (6.5 Medium, published 3 Feb 2023)
Same weakness in other software
These advisories are the same class of weakness (CWE-835: Infinite Loop) in other software:
- CVE-2026-8798 (published 8 Aug 2026)
- CVE-2026-71436 (published 6 Aug 2026)
- CVE-2026-71227 (5.1 Medium, published 5 Aug 2026)
- CVE-2026-10686 (5.8 Medium, published 31 Jul 2026)
- CVE-2026-68499 (6.2 Medium, published 31 Jul 2026)
- CVE-2026-67214 (8.0 High, published 29 Jul 2026)
- CVE-2026-59901 (8.0 High, published 29 Jul 2026)
- CVE-2026-67213 (8.0 High, published 29 Jul 2026)
CVE-2022-0778 on other distributions
Each distribution ships its own build and its own fixed version. Pick the one you run:
Details
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Packages
| Software | From version | Fixed in |
|---|---|---|
| 500f-firmware | — | — |
| a250-firmware | — | — |
| cloud-volumes-ontap-mediator | — | — |
| clustered-data-ontap | — | — |
| clustered-data-ontap-antivirus-connector | — | — |
| debian-linux | — | — |
| fedora | — | — |
| mariadb | — | — |
| mariadb-min | — | — |
| mysql-client | — | — |
| nessus | 10.0.0 | 10.1.2 |
| node | — | — |
| node-min | — | — |
| node.js | 17.0.0 | 17.7.2 |
| openssl | 3.0.0 | 3.0.2 |
| openssl-src | — | — |
| santricity-smi-s-provider | — | — |
| storagegrid | — | — |
References
Similar Threats
- High CVE-2024-6119
- High CVE-2024-6387
- High CVE-2024-1086
- Medium CVE-2023-25136
Site Security Check
Is 500f-firmware part of your stack?
CVE-2022-0778 is rated CVSS 8.0 High. BotEraser scans your installation against known CVE records and tells you whether this vulnerability applies to the versions you actually run.
Scan My Site Free →No credit card required · Results in minutes
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.
