Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-95ub-7a6n-afdg
Aliases:
CVE-2022-2068
|
openssl: the c_rehash script allows command injection
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-q2ae-5r8q-3fbv
|
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The `c_rehash` script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the `c_rehash` script is considered obsolete and should be replaced by the OpenSSL `rehash` command line tool.
|
CVE-2022-1292
|