Attributed metadata history
Up to 100 retained publisher events per page for 5ac9a66330f9fbc38e8da85c2203a9e85684e9913be4ca373c60cb42f132a1a2. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_3903b1582d75bc313f
observed · 2026-10-12 08:51:04 UTC
available
Fingerprint: bc5c4bceeab3235b86e0f599c7714500aa36299f6f25371079cb0f0f120ae1e7
intelligence_src_3903b1582d75bc313f
observed · 2026-10-12 08:51:04 UTC
CVSSv3 Score: 7.5 A security advisory was released affecting the version of OpenSSL library used in some Fortinet products:CVE-2022-0778:The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters.Thus vulnerable situations include:TLS clients consuming server certificatesTLS servers consuming client certificatesHosting providers taking certificates or private keys from customersCertificate authorities parsing certification requests from subscribersAnything else which pars
Fingerprint: a4488832d1ef9073ebe951dec9c6eedf09ccf5a52c277d5df51b988d46ca8d8b