The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-perlUpgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Aug 11, 2022 | May 3, 2022 |
| Alpine Linux | — | Upgrade opensslUpgrade openssl1.1-compat | Aug 22, 2024 | May 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade openssl11-staticUpgrade edk2-tools-docUpgrade opensslUpgrade edk2-ovmfUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl11-develUpgrade edk2-toolsUpgrade edk2-aarch64Upgrade openssl11-libsUpgrade edk2-debuginfoUpgrade openssl-staticUpgrade openssl-develUpgrade openssl11Upgrade openssl-debuginfoUpgrade openssl11-debuginfoUpgrade edk2-tools-python | Jul 4, 2022 | May 3, 2022 |
| Amazon_linux | — | Upgrade openssl | Jul 8, 2022 | May 3, 2022 |
| Amazon_linux_2023 | — | Upgrade openssl-libsUpgrade openssl-perlUpgrade opensslUpgrade openssl-develUpgrade openssl-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl-debuginfo | Feb 17, 2025 | May 3, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 3, 2022 |
| Centos_linux | — | Upgrade foreman_ygg_workerUpgrade satellite-cliUpgrade foreman-cliUpgrade puppet-agentUpgrade yggdrasil | Aug 11, 2022 | May 3, 2022 |
| Debian | — | Upgrade openssl | May 16, 2022 | May 3, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade mysql-client80Upgrade openssl-develUpgrade mysql-server56Upgrade mysql-server57Upgrade openssl-quictlsUpgrade mysql-server80Upgrade openssl | Nov 4, 2022 | Jul 21, 2022 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 17, 2022 | May 3, 2022 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | May 4, 2022 | May 3, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsgx-launchUpgrade libsgx-enclave-commonUpgrade libsgx-ae-leUpgrade libsgx-urtsUpgrade libsgx-aesm-launch-pluginUpgrade sgx-aesm-serviceUpgrade sgxsdk | Aug 2, 2022 | May 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Oct 28, 2022 | May 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111d-staticUpgrade openssl111d-libsUpgrade openssl111dUpgrade openssl111d-devel | Jun 17, 2022 | May 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade opensslUpgrade openssl-perl | Jun 22, 2022 | May 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade openssl | Jul 11, 2022 | May 3, 2022 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory36 | Oct 12, 2022 | May 3, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30Upgrade to MySQL version 5.7.39 | Jun 15, 2026 | May 3, 2022 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade openssl-develUpgrade opensslUpgrade openssl-debugsourceUpgrade openssl-static | Aug 3, 2022 | May 3, 2022 |
| Redhat_linux | — | Upgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-debugsourceNo solution existsUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-debuginfo | Aug 11, 2022 | May 3, 2022 |
| Rocky_linux | — | Upgrade openssl-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade openssl-debugsourceUpgrade openssl-develUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade openssl-libsUpgrade libdb-cxx-debuginfoUpgrade openssl-libs-debuginfoUpgrade openssl-perlUpgrade opensslUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfo | Mar 5, 2024 | May 3, 2022 |
| Sonicwall Email Security | — | Update SonicWall Email Security to version 10.0.18.7423 or later | Sep 22, 2025 | Jul 13, 2022 |
| Sonicwall Email Security Appliances | — | — | Sep 4, 2025 | Jul 13, 2022 |
| Sonicwall Gms | — | Update SonicWall GMS to version 9.3.2 or later | Sep 4, 2025 | Jul 13, 2022 |
| Suse | — | Upgrade libopenssl1_1-hmacUpgrade openssl-1_0_0Upgrade openssl-3-docUpgrade openssl-3Upgrade libopenssl1_0_0-steamUpgrade openssl-docUpgrade openssl-1_0_0-docUpgrade openssl-1_1Upgrade libopenssl1_1Upgrade libopenssl1_1-hmac-32bitUpgrade openssl-1_1-docUpgrade libopenssl3-32bitUpgrade libopenssl1_0_0-hmacUpgrade opensslUpgrade libopenssl1_0_0-steam-32bitUpgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl-3-develUpgrade libopenssl0_9_8Upgrade libopenssl3Upgrade libopenssl1_0_0-32bitUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-develUpgrade libopenssl10Upgrade libopenssl-1_0_0-develUpgrade openssl-1_0_0-cavsUpgrade libopenssl1_1-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl-3-devel-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_0_0Upgrade libopenssl-1_1-devel | Oct 26, 2022 | May 3, 2022 |
| Ubuntu | — | Upgrade libnode72Upgrade ovmf (Ubuntu Pro)Upgrade nodejs-docUpgrade libnode-devUpgrade libssl1.1Upgrade nodejsUpgrade libssl3Upgrade libssl1.0.0 (Ubuntu Pro)Upgrade libssl1.0.0Upgrade qemu-efi (Ubuntu Pro)Upgrade openssl (Ubuntu Pro) | May 5, 2022 | May 3, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub