{"id":"CVE-2022-2068","published":"2022-06-21T14:45:20Z","modified":"2026-10-14T12:57:37Z","title":"The c_rehash script allows command injection","vendor":"OpenSSL","product":"OpenSSL","tier":"core","eol":null,"affectedVersions":[{"vendor":"OpenSSL","product":"OpenSSL","versions":["Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3)","Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o)","Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze)"]}],"description":{"text":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","provenance":"source","from":"CVE.org"},"summary":{"text":"The c_rehash script in OpenSSL fails to sanitise shell metacharacters in certificate file names passed to shell commands, causing OS command injection. On operating systems that automatically execute the script, an attacker can run arbitrary commands with the script's privileges, with no authentication, user interaction, or special configuration required beyond that automatic execution.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:25Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.96391,"percentile":0.9988,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":20,"pulses":[{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769ea2d982f518da8706ad","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769e9cd982f518da8706ac","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769e949865f83acda96106","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769e1a969020a0a27fdadb","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769ddbd7a90ef4c4ee24b1","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769ddbeb4aea06bbbff46b","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769dd0a1cc8c3e72d510bd","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769dc4a1a62217b180c1c1","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769dc4b149813b84cb9764","created":"2026-08-08"},{"name":"Clone Credit: Disable_Duck 3years ago | Title: Investigation of Distribution Vectors and Threat Net","url":"https://otx.alienvault.com/pulse/6a769dc16458c2be21fd002e","created":"2026-08-08"}],"provenance":"machine"},"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://www.openssl.org/news/secadv/20220621.txt","tags":[]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa","tags":[]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7","tags":[]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9","tags":[]},{"url":"https://www.debian.org/security/2022/dsa-5169","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/","tags":["vendor-advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220707-0008/","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","tags":["vendor-advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","tags":[]},{"url":"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis","tags":[]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-332410.html","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-146325.html","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-34360","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34360","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-06-21","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-2068","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":29.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.98,"detail":"percentile 0.9988"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"20 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}