{"answers":{"affected":"5 open source packages ship an affected version, including openssl-src. It affects 2 products.","exploited":"There is no known exploitation of CVE-2022-4450 in the wild and no public exploit code.","fix":"Upgrade openssl-src to a fixed version for your release line: 111.25.0 or 300.0.12.","what":"CVE-2022-4450 is a high-severity use after free vulnerability in Openssl Openssl, published on 8 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2022-4450 and fix it if it is affected.\n\nWhat it is: CVE-2022-4450 is a high-severity use after free vulnerability in Openssl Openssl, published on 8 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2022-4450 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- openssl-src (crates.io): affected all versions; fixed in 111.25.0\n- openssl-src (crates.io): affected all versions; fixed in 111.25.0\n- openssl-src (crates.io): affected from 0.0.0-0; fixed in 111.25.0, 300.0.12\n- openssl-src (crates.io): affected from 300.0.0; fixed in 300.0.12\n- openssl-src (crates.io): affected from 300.0.0; fixed in 300.0.12\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2022-4450/ (Markdown: https://insights.sbomify.com/CVE-2022-4450/index.md)","id":"CVE-2022-4450","markdown":"https://insights.sbomify.com/CVE-2022-4450/index.md","name":"CVE-2022-4450","record":{"aliases":["ALPINE-CVE-2022-4450","AZL-13347","AZL-13351","AZL-37629","AZL-37892","CLEANSTART-2026-LY01438","DEBIAN-CVE-2022-4450","GHSA-v5w6-wcm8-jm4q","JLSEC-2026-232","OESA-2024-2312","OESA-2024-2313","RUSTSEC-2023-0010","UBUNTU-CVE-2022-4450"],"analysis":{"component_type":"library","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"OpenSSL library","requires_auth":"none","summary":"An attacker can cause a denial of service by supplying a malicious PEM file that triggers a double free in OpenSSL's PEM parsing functions.","user_interaction":"not_required","vuln_class":"use_after_free"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"openssl","cpe":[{"product":"openssl","vendor":"openssl"},{"product":"stormshield_network_security","vendor":"stormshield"}],"cvss":{"score":7.5,"severity":"high","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-415","name":"Double Free"}],"description":"The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data.\nIf the function succeeds then the \"name_out\", \"header\" and \"data\" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.","ecosystems":["crates.io"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Double free after calling PEM_read_bio_ex","id":"CVE-2022-4450","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"crates.io","product":"openssl:openssl","products":["openssl:openssl"],"type":"use_after_free","year":"2022"},"n_packages":5,"n_references":4,"next":{"headline":"Sassy Social Share \u003c 3.3.45 - Contributor+ Stored XSS","id":"CVE-2022-4451"},"packages":[{"ecosystem":"crates.io","fixed":["111.25.0"],"introduced":["0"],"last_affected":[],"package":"openssl-src","purl":null,"source":"GHSA-v5w6-wcm8-jm4q"},{"ecosystem":"crates.io","fixed":["111.25.0"],"introduced":["0"],"last_affected":[],"package":"openssl-src","purl":"pkg:cargo/openssl-src","source":"GHSA-v5w6-wcm8-jm4q"},{"ecosystem":"crates.io","fixed":["111.25.0","300.0.12"],"introduced":["0.0.0-0","300.0.0"],"last_affected":[],"package":"openssl-src","purl":"pkg:cargo/openssl-src","source":"RUSTSEC-2023-0010"},{"ecosystem":"crates.io","fixed":["300.0.12"],"introduced":["300.0.0"],"last_affected":[],"package":"openssl-src","purl":null,"source":"GHSA-v5w6-wcm8-jm4q"},{"ecosystem":"crates.io","fixed":["300.0.12"],"introduced":["300.0.0"],"last_affected":[],"package":"openssl-src","purl":"pkg:cargo/openssl-src","source":"GHSA-v5w6-wcm8-jm4q"}],"prev":{"headline":"Page Scroll To ID \u003c 1.7.6 - Contributor+ Stored XSS","id":"CVE-2022-4449"},"products":["OpenSSL"],"published":"2023-02-08","related":[{"cvss_score":10,"headline":"Null dereference in n/a","id":"CVE-2009-3245","kev_date_added":null,"published":"2010-03-05"},{"cvss_score":10,"headline":"Memory corruption in n/a","id":"CVE-2006-3738","kev_date_added":null,"published":"2006-09-28"},{"cvss_score":9.8,"headline":"Untrusted Sender DN Used as Format String in CMP Response Validation","id":"CVE-2026-63073","kev_date_added":null,"published":"2026-08-25"},{"cvss_score":9.8,"headline":"Use after free in n/a","id":"CVE-2016-6309","kev_date_added":null,"published":"2016-09-26"},{"cvss_score":9.8,"headline":"Integer overflow in n/a","id":"CVE-2016-0799","kev_date_added":null,"published":"2016-03-03"},{"cvss_score":9.8,"headline":"Memory corruption in n/a","id":"CVE-2016-2842","kev_date_added":null,"published":"2016-03-03"},{"cvss_score":9.8,"headline":"Memory corruption in n/a","id":"CVE-2003-0545","kev_date_added":null,"published":"2003-10-01"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"open","licence":"CC0 1.0","name":"RustSec","prefix":"RUSTSEC"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-10-14","vendors":["OpenSSL"]},"summary":"An attacker can cause a denial of service by supplying a malicious PEM file that triggers a double free in OpenSSL's PEM parsing functions.","url":"https://insights.sbomify.com/CVE-2022-4450/"}