Security ID : QSA-22-17
Multiple Vulnerabilities in OpenSSL
Release date : May 23, 2022
CVE identifier : CVE-2022-1292 | CVE-2022-1343 | CVE-2022-1434 | CVE-2022-1473
Affected products: None
Severity
None
Status
Not Affected
Summary
OpenSSL recently disclosed multiple vulnerabilities:
- CVE-2022-1292: The c_rehash script allows command injection
- CVE-2022-1343: OCSP_basic_verify may incorrectly verify the response signing certificate
- CVE-2022-1434: Incorrect MAC key used in the RC4-MD5 ciphersuite
- CVE-2022-1473: Resource leakage when decoding certificates and keys
QNAP products are not affected.
Revision History: V1.0 (May 23, 2022) - Published
