OpenSSL 3 Buffer overflow vulnerabilities: CVE-2022-3786 and CVE-2022-3602
Tags
country: Netherlands
attack-pattern: Domains - T1583.001 Domains - T1584.001 Email Addresses - T1589.002 Exploits - T1587.004 Exploits - T1588.005 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID f176fc25-bdd4-477d-b30d-73f50789af30
Fingerprint f499f8ef790be78d
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 1, 2022, 4:39 p.m.
Added to db Aug. 31, 2024, 6:06 a.m.
Last updated Nov. 18, 2024, 3:30 p.m.
Headline OpenSSL 3 Buffer overflow vulnerabilities: CVE-2022-3786 and CVE-2022-3602
Title OpenSSL 3 Buffer overflow vulnerabilities: CVE-2022-3786 and CVE-2022-3602
Detected Hints/Tags/Attributes 30/2/18
Source URLs
Redirection Url
Details Source https://research.kudelskisecurity.com/2022/11/01/openssl-3-buffer-overflow-vulnerabilities-cve-2022-3786-and-cve-2022-3602/
URL Provider
Details Provider Source level domain
Details kudelskisecurity.com research.kudelskisecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 205 ✔ Kudelski Security Research https://research.kudelskisecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 37 
cve-2022-3786
Details CVE 37 
cve-2022-3602
Details Domain 4134 
github.com
Details Domain 206 
www.example.com
Details Domain 3 
securitylabs.datadoghq.com
Details Domain 1 
www.fudzilla.com
Details Domain 180 
readme.md
Details Domain 79 
www.openssl.org
Details File 4 
securitylabs.dat
Details File 2 
20221101.txt
Details Github username 3 
ncsc-nl
Details Url 1 
https://github.com/ncsc-nl/openssl-2022/tree/main/software
Details Url 1 
https://securitylabs.datadoghq.com/articles/openssl-november-1-vulnerabilities
Details Url 1 
https://www.fudzilla.com/news/55751-openssl-flaw-should-be-patched-today
Details Url 1 
https://github.com/ncsc-nl/openssl-2022/blob/main/software/readme.md
Details Url 2 
https://www.openssl.org/news/secadv/20221101.txt
Details Url 1 
https://www.sentinelone.com/blog/openssl-3-critical-vulnerabililty-what-do-organizations-need-to-do-now
Details Url 2 
https://isc.sans.edu/forums/diary/upcoming