ncsc-nl / openssl-2022 Goto Github PK
View Code? Open in Web Editor NEWOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3
License: MIT License
Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3
License: MIT License
This is an FYI, I have created a PR in the Nuclei with a template to detect web servers with header information containing OpenSSL versions 3.0.0-3.0.6.
The pull request is here: projectdiscovery/nuclei-templates#6130
I will submit a PR to this repo if my template is accepted by the Nuclei team.
(I wasn't sure if/where a link might make sense, so feel free to close this once you've seen it!)
Just an offer to collaborate / cross reference as we discover things.
Here is where I am working:
https://www.techsolvency.com/story-so-far/cve-tbd-openssl-3.0.7-critical/
Should the cryptography
lib from Python be included in this list?
https://github.com/pyca/cryptography
They link OpenSSL at build time, so some versions of the lib could be carrying a vulnerable version of OpenSSL.
They've upgraded the lib already, their version 38.0.3 includes OpenSSL 3.0.7: pyca/cryptography#7758
I think from 37.x.x to 38.0.2 all include a vulnerable OpenSSL
Would be nice to automatically build a site (github.io?) with the software table but with filtering and sorting capabilities.
Harbor docker images are vulnerable since it uses VMWare Photon 4.0 as base image.
Deployments outside of Docker should not be impacted.
Vulnerable version range will most probably be <=2.6.1
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.