CVE-2022-2068
HighPublic exploitopenssl: the c_rehash script allows command injection
Published Aug 31, 2022 · Updated Oct 16, 2026 · Also known as ALPINE-CVE-2022-2068, DEBIAN-CVE-2022-2068, DSA-5169-1, EUVD-2022-34360, GHSA-xjxr-x4h8-946x, JLSEC-2026-229, SUSE-SU-2022:2179-1, SUSE-SU-2022:2180-1, SUSE-SU-2022:2181-1, SUSE-SU-2022:2309-1, UBUNTU-CVE-2022-2068, USN-5488-1, USN-5488-2
Key Facts
Patch immediately- CVE-2022-2068 is a high-severity vulnerability (CVSS 7.3 v3.1) affecting Sannav (Broadcom), Element Software (Netapp), Hci Management Node (Netapp) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 96% probability of exploitation in the next 30 days.
- Fixed versions are available, including compat-openssl098 0.9.8j-106.36.1, edk2-aarch64 20200801stable-1.amzn2.0.5, edk2-ovmf 20200801stable-1.amzn2.0.5.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
7.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
96%
Higher than 99.8% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2022-2068 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).
Affected Products
601 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| SannavBroadcom | See advisory | n/a |
| Element SoftwareNetapp | See advisory | n/a |
| Hci Management NodeNetapp | See advisory | n/a |
| Ontap Antivirus ConnectorNetapp | See advisory | n/a |
| Ontap Select Deploy Administration UtilityNetapp | See advisory | n/a |
Patched Releases
compat-openssl098
0.9.8j-106.36.1
edk2-aarch64
20200801stable-1.amzn2.0.5
edk2-ovmf
20200801stable-1.amzn2.0.5
edk2-tools
20200801stable-1.amzn2.0.5
edk2-tools-doc
20200801stable-1.amzn2.0.5
edk2-tools-python
20200801stable-1.amzn2.0.5
grype
0.92.1-1.1
grype-bash-completion
0.92.1-1.1
grype-fish-completion
0.92.1-1.1
grype-zsh-completion
0.92.1-1.1
jbcs-httpd24-openssl
1:1.1.1k-13.el7jbcs, 1:1.1.1k-13.el8jbcs
jws5-tomcat-native
0:1.2.31-11.redhat_11.el7jws, 0:1.2.31-11.redhat_11.el8jws, 0:1.2.31-11.redhat_11.el9jws
libopenssl-1_0_0-devel
1.0.2p-150000.3.56.1, 1.0.2p-3.56.1, 1.0.2u-9.1
libopenssl-1_0_0-devel-32bit
1.0.2p-150000.3.56.1, 1.0.2p-3.56.1, 1.0.2u-9.1
libopenssl-1_1-devel
1.1.0i-150000.4.74.1, 1.1.0i-150100.14.33.1, 1.1.1d-150200.11.48.1, 1.1.1d-2.66.1, 1.1.1l-150400.7.7.1, 1.1.1p-1.1
libopenssl-1_1-devel-32bit
1.1.0i-150100.14.33.1, 1.1.1d-150200.11.48.1, 1.1.1d-2.66.1, 1.1.1l-150400.7.7.1, 1.1.1p-1.1
libopenssl-3-devel
3.0.1-150400.4.7.1
libopenssl-3-devel-32bit
3.0.1-150400.4.7.1
libopenssl-devel
1.0.2j-60.83.1
libopenssl0_9_8
0.9.8j-106.36.1
libopenssl0_9_8-32bit
0.9.8j-106.36.1
libopenssl1_0_0
1.0.2j-60.83.1, 1.0.2p-150000.3.56.1, 1.0.2p-3.56.1, 1.0.2u-9.1
libopenssl1_0_0-32bit
1.0.2j-60.83.1, 1.0.2p-150000.3.56.1, 1.0.2p-3.56.1, 1.0.2u-9.1
libopenssl1_0_0-hmac
1.0.2j-60.83.1, 1.0.2p-150000.3.56.1, 1.0.2p-3.56.1, 1.0.2u-9.1
libopenssl1_0_0-hmac-32bit
1.0.2j-60.83.1, 1.0.2p-150000.3.56.1, 1.0.2p-3.56.1, 1.0.2u-9.1
Timeline
Publicly disclosed
Aug 31, 2022
Last updated
Oct 16, 2026
Weakness Type
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
References
- advisoryhttp://access.redhat.com/errata/RHBA-2022:1352
- advisoryhttp://access.redhat.com/errata/RHSA-2022:5799
- advisoryhttp://access.redhat.com/errata/RHSA-2022:6024
- advisoryhttp://access.redhat.com/errata/RHSA-2022:6043
- advisoryhttp://access.redhat.com/errata/RHSA-2022:6224
FAQ
Common Questions.
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review.
Affected: Sannav (Broadcom); Element Software (Netapp); Hci Management Node (Netapp), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including compat-openssl098 0.9.8j-106.36.1, edk2-aarch64 20200801stable-1.amzn2.0.5, edk2-ovmf 20200801stable-1.amzn2.0.5.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2022-2068 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo