{"metadata": {"vulnerability": "CVE-2022-3786", "count": 313, "kinds": {"milestone": 60, "sighting": 47, "kev": 0, "other": 206}}, "data": [{"timestamp": "2022-10-26T00:00:00Z", "date_only": false, "value": "2022-10-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-10-26T00:00:00Z", "date_only": false, "value": "2022-10-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-10-26T00:00:00Z", "date_only": false, "value": "2022-10-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-10-26T00:00:00Z", "date_only": false, "value": "2022-10-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-28T21:40:41Z", "date_only": false, "value": "2022-10-28T21:40:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / openssl", "record": "CVE-2022-3786", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": true, "value": "2022-11-01", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-3786", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2022:7288", "record": "ALSA-2022:7288", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-3786", "record": "UBUNTU-CVE-2022-3786", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-3786", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-01T12:00:00Z", "date_only": false, "value": "2022-11-01T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2022-0065", "record": "RUSTSEC-2022-0065", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T16:29:39.763Z", "date_only": false, "value": "2022-11-01T16:29:39.763Z", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.database_specific.OSV.published", "linked_record": true}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T16:40:22Z", "date_only": false, "value": "2022-11-01T16:40:22Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:3843-1", "record": "SUSE-SU-2022:3843-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2022-11-01T16:54:00.550Z", "date_only": false, "value": "2022-11-01T16:54:00.550547Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.modified", "linked_record": true}, {"timestamp": "2022-11-01T17:28:35Z", "date_only": false, "value": "2022-11-01T17:28:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2723", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "2646065e-7033-4af4-a392-d9d559d42977", "content": "Nothing CRITICAL this time!\n\nOpenSSL has released patches for 2 new high-severity flaws (CVE-2022-3786 / CVE-2022-3602).\n\nhttps://thehackernews.com/2022/11/just-in-openssl-releases-patch-for-2.html\n\nCVE-2022-3602 has been downgraded from CRITICAL to HIGH as it cannot be exploited in most widely used architectures and platforms.", "url": "https://t.me/thehackernews/2723"}, {"timestamp": "2022-11-01T17:42:03Z", "date_only": false, "value": "2022-11-01T17:42:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72672", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "2a28436f-9479-4bd0-8f52-bd977da25962", "content": "Critical OpenSSL 3.0 Update Released. Patches CVE-2022-3786, (Tue, Nov 1st)\n\nhttps://ift.tt/1tBJxob", "url": "https://t.me/ctinow/72672"}, {"timestamp": "2022-11-01T17:45:21Z", "date_only": false, "value": "2022-11-01T17:45:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H8JM-2X53-XHP5", "record": "GHSA-H8JM-2X53-XHP5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T18:14:16Z", "date_only": false, "value": "2022-11-01T18:14:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BvLKt3rLrvV1MavTWtzUjCGDDZdoZfIDa5boheIt5lY5uHc", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "2390030b-240b-45fa-8aa4-d7418ebed0a9"}, {"timestamp": "2022-11-01T18:15:00Z", "date_only": false, "value": "2022-11-01T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H8JM-2X53-XHP5", "record": "GHSA-H8JM-2X53-XHP5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-11-01T18:15:00Z", "date_only": false, "value": "2022-11-01T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-11-01T18:15:11.047Z", "date_only": false, "value": "2022-11-01T18:15:11.047", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3786", "record": "FKIE_CVE-2022-3786", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-01T19:15:11Z", "date_only": false, "value": "2022-11-01T19:15:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/16060", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "9795b5d6-e892-4f0c-9ef3-1c5f6b4f2413", "content": "\u05d6\u05d4 \u05dc\u05d0 \u05d4-log4j \u05d4\u05d1\u05d0, \u05d0\u05d1\u05dc \u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05e1\u05e4\u05e8\u05d9\u05d9\u05ea \u05d4\u05e7\u05d5\u05d3 \u05d4\u05e4\u05ea\u05d5\u05d7 \u05d4\u05e4\u05d5\u05e4\u05d5\u05dc\u05e8\u05d9\u05ea OpenSSL \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05d4\u05d9\u05d5\u05dd, \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e2\u05d3\u05db\u05df.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea CVE-2022-3602 \u05d5-\u00a0CVE-2022-3786 \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05e0\u05e6\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05d2\u05e8\u05e1\u05d4 3.0 \u05d5\u05de\u05e2\u05dc\u05d4 \u05d5\u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d0\u05d5 \u05d1\u05d9\u05e6\u05d5\u05e2 DDoS, \u05d1\u05ea\u05d7\u05d9\u05dc\u05d4 \u05d3\u05d5\u05e8\u05d2\u05d5 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d0\u05da \u05dc\u05d1\u05e1\u05d5\u05e3 \u05e8\u05de\u05ea \u05d4\u05d7\u05d5\u05de\u05e8\u05d4 \u05e9\u05d5\u05e0\u05ea\u05d4 \u05dc\u05e8\u05de\u05d4 \u05e0\u05de\u05d5\u05db\u05d4 \u05d9\u05d5\u05ea\u05e8.\n\n\u05d1\u05e9\u05dc\u05d1 \u05d6\u05d4 \u05e6\u05d5\u05d5\u05ea \u05d4\u05e4\u05e8\u05d5\u05d9\u05d9\u05e7\u05d8 \u05de\u05d5\u05e1\u05e8 \u05db\u05d9 \u05d4\u05d5\u05d0 \u05dc\u05d0 \u05de\u05db\u05d9\u05e8 \u05e0\u05d9\u05e6\u05d5\u05dc \u05e7\u05d9\u05d9\u05dd \u05dc\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05dc\u05d5 \u05d0\u05da \u05de\u05e4\u05e6\u05d9\u05e8 \u05dc\u05e2\u05d3\u05db\u05df \u05dc\u05d2\u05e8\u05e1\u05d4 3.0.7 \u05d1\u05d4 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e0\u05e1\u05d2\u05e8\u05d5.\n\nhttps://t.me/CyberSecurityIL/2338\n\nhttps://www.bleepingcomputer.com/news/security/openssl-fixes-two-high-severity-vulnerabilities-what-you-need-to-know/\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "url": "https://t.me/CyberSecurityIL/16060"}, {"timestamp": "2022-11-01T20:11:17Z", "date_only": false, "value": "2022-11-01T20:11:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72712", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "572ab014-89f4-4559-892a-c2b149574172", "content": "High-severity OpenSSL vulnerabilities fixed (CVE-2022-3602, CVE-2022-3786)\n\nhttps://ift.tt/iLC580f", "url": "https://t.me/ctinow/72712"}, {"timestamp": "2022-11-01T20:23:02Z", "date_only": false, "value": "2022-11-01T20:23:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-11-01T20:46:42Z", "date_only": false, "value": "2022-11-01T20:46:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72717", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "4728e7d7-9cb3-4f72-ad11-db6fe3cb98aa", "content": "What the OpenSSL Vulnerabilities Are\u2026and Aren\u2019t (CVE-2022-3786 & CVE-2022-3602)\n\nhttps://ift.tt/Ys34Elk", "url": "https://t.me/ctinow/72717"}, {"timestamp": "2022-11-01T21:19:05Z", "date_only": false, "value": "2022-11-01T21:19:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/52409", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a4896714-0327-48a5-88ed-3e70e7fe1050", "content": "\u203c CVE-2022-3786 \u203c\n\nA buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/52409"}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-01T23:00:00Z", "date_only": false, "value": "2022-11-01T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-02T00:00:00Z", "date_only": false, "value": "2022-11-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-985", "record": "CERTFR-2022-AVI-985", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-11-02T06:00:00Z", "date_only": false, "value": "2022-11-02T06:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2022/11/microsoft-guidance-related-to-openssl-risk-cve-2022-3786-and-cve-2202-3602/", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "4d44e1c5-ee8e-4775-9706-3461abba0f57", "url": "https://msrc.microsoft.com/blog/2022/11/microsoft-guidance-related-to-openssl-risk-cve-2022-3786-and-cve-2202-3602/"}, {"timestamp": "2022-11-02T09:51:28Z", "date_only": false, "value": "2022-11-02T09:51:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72828", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "66478a5c-b85d-480b-bdd6-665cc296d344", "content": "Security Advisory for OpenSSL Vulnerabilities CVE-2022-3602 & CVE-2022-3786\n\nhttps://ift.tt/upNe8F5", "url": "https://t.me/ctinow/72828"}, {"timestamp": "2022-11-02T12:14:42Z", "date_only": false, "value": "2022-11-02T12:14:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/561", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a3ccb801-0a52-498d-9ec4-45a3289988a9", "content": "\u200b\u200bCVE\u22122022-3602\n\nThis document and repository is a write-up of CVE\u22122022-3602, a punycode buffer overflow issue in OpenSSL. It's an \"anti-POC\" (the issue does not appear to exploitable) intended for folks who maintain their own OpenSSL builds and for compiler maintainers.\n\nThere is a seperate CVE in the same release, CVE-2022-3786, which also leads to buffer overflows but an attacker can't control the content in that case. There is no reproduction for that issue here, but that issue can lead to a Denial of Service due to crash.\n\nCrashes and Buffer over\ufb02lows are never good and if you are using OpenSSL 3.0.x, it is prudent to update as soon as possible.\n\nhttps://github.com/colmmacc/CVE-2022-3602\n\n#cve #poc", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/561"}, {"timestamp": "2022-11-02T13:35:04Z", "date_only": false, "value": "2022-11-02T13:35:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3651", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a5aee9ae-1268-42fe-a4b9-3d45781e2932", "content": "\u0428\u0438\u0440\u043e\u043a\u043e \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0435 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f OpenSSL \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\nCVE-2022-3602 \u0438 CVE-2022-3786 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 OpenSSL \u0432\u0435\u0440\u0441\u0438\u0438 3.0.0 \u0438 \u0432\u044b\u0448\u0435 \u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 OpenSSL 3.0.7.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2022-3602 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 4-\u0431\u0430\u0439\u0442\u043e\u0432\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a2022-3602 \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0430\u044f  CVE-2022-3786 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0438 CVE-20\u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043d\u0438 \u043e \u043a\u0430\u043a\u043e\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0438 \u0443 \u043d\u0438\u0445 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u0439\u00a0Open SSL, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0418\u0422-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b\u00a0\u0441 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f\u00a0\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u044b\u00a0\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 OpenSSL 3.0.7.\n\nOpenSSL \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u0442\u0440\u0435\u0431\u0443\u044f \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 TLS, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 TLS \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0425\u043e\u0442\u044f \u0438 \u043d\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u043e \u043e\u0446\u0435\u043d\u043a\u0443 CVE-2022-3602 \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u043e\u043d\u0438\u0436\u0435\u043d\u0430 \u0434\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438\u00a0\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b OpenSSL 3.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0443\u0436\u0435 \u043f\u0440\u0438\u0440\u0430\u0432\u043d\u044f\u043b\u0438 \u0431\u0430\u0433\u0438 \u043a \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439\u043e\u0441\u0442\u0438.\n\nCVE-2022-\u0438\u0437 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1 793 000 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u043d\u043b\u0430\u0439\u043d-\u0445\u043e\u0441\u0442\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 7000 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\nShodan\u00a0\u0434\u0430\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432 16 000 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 OpenSSL.\n\n\u041f\u043e\u0441\u043b\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, AWS, GCP, Azure, OCI \u0438 Alibaba Cloud) \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Wiz.io \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043b\u0438\u0448\u044c 1,5% \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 OpenSSL.\n\n\u0412 \u0438\u0442\u043e\u0433\u0435: \u043c\u043d\u043e\u0433\u043e \u0448\u0443\u043c\u0430 \u0438\u0437 \u043d\u0438\u0447\u0435\u0433\u043e.", "url": "https://t.me/true_secator/3651"}, {"timestamp": "2022-11-02T15:02:30Z", "date_only": false, "value": "2022-11-02T15:02:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/3165", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "3cea798a-75fa-4b72-b641-70dbb4f5316c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\nURL\uff1ahttps://github.com/NCSC-NL/OpenSSL-2022\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3165"}, {"timestamp": "2022-11-02T15:48:10.308Z", "date_only": false, "value": "2022-11-02T15:48:10.308Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.database_specific.OSV.modified", "linked_record": true}, {"timestamp": "2022-11-02T16:12:00Z", "date_only": false, "value": "2022-11-02T16:12:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/72926", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1ef985ed-ddad-4c2c-84ab-483c7d9d4d92", "content": "High-severity OpenSSL vulnerabilities fixed (CVE-2022-3602, CVE-2022-3786)\n\nhttps://ift.tt/HB871tA", "url": "https://t.me/ctinow/72926"}, {"timestamp": "2022-11-02T18:08:04Z", "date_only": false, "value": "2022-11-02T18:08:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/567", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "b9f88f5e-f7b4-467d-bd98-d0c718f2142a", "content": "\u200b\u200bCVE\u22122022-3602\n\nThis document and repository is a write-up of CVE\u22122022-3602, a punycode buffer overflow issue in OpenSSL. It's an \"anti-POC\" (the issue does not appear to exploitable) intended for folks who maintain their own OpenSSL builds and for compiler maintainers.\n\nThere is a seperate CVE in the same release, CVE-2022-3786, which also leads to buffer overflows but an attacker can't control the content in that case. There is no reproduction for that issue here, but that issue can lead to a Denial of Service due to crash.\n\nCrashes and Buffer over\ufb02lows are never good and if you are using OpenSSL 3.0.x, it is prudent to update as soon as possible.\n\nhttps://github.com/colmmacc/CVE-2022-3602", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/567"}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-02T18:46:46Z", "date_only": false, "value": "2022-11-02T18:46:46+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2022-11-02T19:26:36Z", "date_only": false, "value": "2022-11-02T19:26:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2022-11-02T21:46:40Z", "date_only": false, "value": "2022-11-02T21:46:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H8JM-2X53-XHP5", "record": "GHSA-H8JM-2X53-XHP5", "field": "modified", "linked_record": true}, {"timestamp": "2022-11-02T22:16:40Z", "date_only": false, "value": "2022-11-02T22:16:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/73035", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "54ef010c-3357-43ac-9565-86d8f5010e35", "content": "CVE ALERT! OpenSSL CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows\n\nhttps://ift.tt/4kYjHWb", "url": "https://t.me/ctinow/73035"}, {"timestamp": "2022-11-02T23:00:00Z", "date_only": false, "value": "2022-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-989", "record": "CERTFR-2022-AVI-989", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-990", "record": "CERTFR-2022-AVI-990", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-11-03T04:56:43Z", "date_only": false, "value": "2022-11-03T04:56:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1136", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a1f6f226-26cf-4a94-8b97-cb57b2b8ebaf", "content": "cve-2022-3602 \ncve-2022-3786 - openssl-poc\nDownload POC\n\n#openssl #poc", "url": "https://t.me/proxy_bar/1136", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-03T05:49:12Z", "date_only": false, "value": "2022-11-03T05:49:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/10366", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "e70b783c-d352-40f5-9189-31c7ef0732db", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2022-3786; DoS: Buffer overflow occurs in the ossl_a2ulabel vulnerable function. When this function meets a Punycode part followed by a dot character (\".\") it also appends \".\" to the output buffer even if it overflows its size.\n\nhttps://twitter.com/_CPResearch_/status/1587741086340075521", "url": "https://t.me/cKure/10366"}, {"timestamp": "2022-11-03T13:03:36Z", "date_only": false, "value": "2022-11-03T13:03:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-11-03T13:03:36Z", "date_only": false, "value": "2022-11-03T13:03:36+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2022-11-03T20:12:42Z", "date_only": false, "value": "2022-11-03T20:12:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2022-11-03T23:06:27Z", "date_only": false, "value": "2022-11-03T23:06:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/73364", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "5a28d827-a7cb-42e9-a73a-45a5ca6a7ee2", "content": "CVE-2022-3602 and CVE-2022-3786 OpenSSL Vulnerabilities: Scanning Container Images\n\nhttps://ift.tt/nDLZdmp", "url": "https://t.me/ctinow/73364"}, {"timestamp": "2022-11-04T06:57:51Z", "date_only": false, "value": "2022-11-04T06:57:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/2428", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1b0ac21e-116d-47f1-853a-f1152ed5c28a", "content": "#CVE-2022\n\nOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\n\nhttps://github.com/NCSC-NL/OpenSSL-2022\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2428"}, {"timestamp": "2022-11-04T07:28:32.835Z", "date_only": false, "value": "2022-11-04T07:28:32.835Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / openssl", "record": "CVE-2022-3786", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-04T08:00:05Z", "date_only": false, "value": "2022-11-04T08:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TopCyberTechNews/192", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "d0d5d644-f0cd-43e7-91c5-f471b0c00c65", "content": "Top Security News for 04/11/2022\n\nStopping C2 communications in human-operated ransomware through network protection\nhttps://www.microsoft.com/en-us/security/blog/2022/11/03/stopping-c2-communications-in-human-operated-ransomware-through-network-protection/ \n\nResearchers Discover Link In Tooling Between FIN7 And Black Basta Ransomware Group\nhttps://packetstormsecurity.com/news/view/34003/Researchers-Discover-Link-In-Tooling-Between-FIN7-And-Black-Basta-Ransomware-Group.html \n\nCombining Powershell Scripts\nhttps://0x00sec.org/t/combining-powershell-scripts/31978 \n\nWhy Identity & Access Management Governance is a Core Part of Your SaaS Security\nhttps://thehackernews.com/2022/11/why-identity-access-management.html \n\nCVE-2022-3602 & CVE-2022-3786 - OSS tools to detect susceptibility to the recent OpenSSL issues\nhttps://www.reddit.com/r/netsec/comments/ykzip5/cve20223602_cve20223786_oss_tools_to_detect/ \n\nNuke Experts Are Horrified by Biden\u2019s New \u2018Nuclear Posture Review\u2019\nhttps://www.vice.com/en_us/article/n7zk9w/nuke-experts-are-horrified-by-bidens-new-nuclear-posture-review \n\nWhy Did the OpenSSL Punycode Vulnerability Happen\nhttps://www.reddit.com/r/netsec/comments/ylgnxb/why_did_the_openssl_punycode_vulnerability_happen/ \n\nReverse Branch Target Buffer Poisoning - new ASLR bypass technique using CPU vulnerabilities [PDF]\nhttps://www.reddit.com/r/netsec/comments/yls06p/reverse_branch_target_buffer_poisoning_new_aslr/ \n\nThreat Model Examples\nhttps://www.reddit.com/r/netsec/comments/yl7xx0/threat_model_examples/ \n\nCyberspace \u2018a battleground\u2019 as reports of cybercrime in Australia jump 13%\nhttps://www.theguardian.com/australia-news/2022/nov/04/cyberspace-a-battleground-as-reports-of-cybercrime-in-australia-jump-13 \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/192"}, {"timestamp": "2022-11-04T15:01:29Z", "date_only": false, "value": "2022-11-04T15:01:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/135818", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "1bd883d5-cdf5-4540-bc76-2b0ca3b9bcd2", "content": "{\n  \"Source\": \"https://t.me/documentors\",\n  \"Content\": \"cve-2022-3602 & cve-2022-3786PoC.zip 4.9 MB \ud83d\udca5Yet another PoC for OpenSSL vulnerabilities(CVE-2022-3602 & CVE-2022-3786) \ud83d\udcc4For Questions and Purchase and place Orders Contact us: \ud83d\udece @darkamo https://t.me/documentors\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"04 Nov 2022\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/135818", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-04T18:40:16Z", "date_only": false, "value": "2022-11-04T18:40:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2022-11-06T23:00:00Z", "date_only": false, "value": "2022-11-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2022-11-07T13:16:19Z", "date_only": false, "value": "2022-11-07T13:16:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3668", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "5efa9e6a-ebdb-4210-8dc3-7b3decec1b29", "content": "\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0440\u044f\u0434 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0432\u0435\u0431-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u0430\u043c\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Cisco Identity Services Engine (ISE).\n\nISE \u2014 \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-20961, \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 (CSRF) \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u0430\u043a \u043f\u0438\u0448\u0443\u0442 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CSRF \u0434\u043b\u044f \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0431\u0430\u0433\u043e\u0439, \u0443\u0431\u0435\u0434\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20956 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7,1) \u0432 \u0442\u043e\u043c \u0436\u0435 ISE \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0433\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443 \u043d\u0435\u0433\u043e \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0421\u043e \u0441\u043b\u043e\u0432 Cisco PSIRT, \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 \u0418\u0422-\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL Injection CVE-2022-20867 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 CVE-2022-20868 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco ESA, Cisco Secure Email \u0438 Web Manager Next Generation Management.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e Cisco \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u0440\u0435\u0441\u043b\u043e\u0432\u0443\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 OpenSSL CVE-2022-3602 \u0438 CVE-2022-3786, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435.", "url": "https://t.me/true_secator/3668"}, {"timestamp": "2022-11-08T20:57:38Z", "date_only": false, "value": "2022-11-08T20:57:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2022-11-08T23:00:00Z", "date_only": false, "value": "2022-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2022-11-10T21:29:01Z", "date_only": false, "value": "2022-11-10T21:29:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/578", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "c297048a-cfbc-4148-8fb1-c30a530924cb", "content": "\u062a\u06a9\u0645\u06cc\u0644\u06cc:\n\n\u062f\u0631 \u0622\u062e\u0631\u06cc\u0646 \u0628\u0647 \u0631\u0648\u0632\u0633\u0627\u0646\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062c\u062f\u06cc\u062f\u062a\u0631\u06cc\u0646 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc OpenSSL \u06a9\u0647 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 CVE-2022-3786 \u0648 CVE-2022-3602 \u0645\u06cc \u0628\u0627\u0634\u062f\u060c \u062f\u0631\u062c\u0647 \u0627\u0647\u0645\u06cc\u062a \u0622\u0646 \u0627\u0632 Critical \u0628\u0647 High \u06a9\u0627\u0647\u0634 \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f.\n\u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u0648 \u0641\u0646\u06cc \u062f\u0631 \u062e\u0635\u0648\u0635 \u0627\u06cc\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0632 \u062c\u0646\u0633 Buffer Overflow \u0627\u0633\u062a \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0639\u0644\u0627\u0642\u0647 \u0645\u0646\u062f\u0627\u0646 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f.\n\u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0633\u0648\u0627\u0644\u0627\u062a \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0648 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631 \u06cc\u0627 \u0631\u06cc\u0633\u06a9 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u067e\u0631\u062f\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\u062c\u0632\u0626\u06cc\u0627\u062a \u06a9\u0627\u0645\u0644: https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/", "url": "https://t.me/MrVGunz/578", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-10T23:00:00Z", "date_only": false, "value": "2022-11-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2022-11-12T11:35:26Z", "date_only": false, "value": "2022-11-12T11:35:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pDlVR56iY6rypUkhFLaqLdVNy7SeZGDsal8kYSFgYj64xD0", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "123baac5-32d9-4b22-ad8f-1c6db93a2114", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-12T16:32:01Z", "date_only": false, "value": "2022-11-12T16:32:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4297", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "ea100f60-21f4-4e79-a03b-36b39ba1b1a5", "content": "cve-2022-3602 \ncve-2022-3786 / openssl-poc\n\nGithub \n\n#Openssl #poc \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4297", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-14T08:56:42Z", "date_only": false, "value": "2022-11-14T08:56:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/328", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "3a2203f6-77e5-4279-91b0-e1365694e551", "content": "https://github.com/rbowes-r7/cve-2022-3602-and-cve-2022-3786-openssl-poc  \n#github", "url": "https://t.me/CNArsenal/328", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-17T23:00:00Z", "date_only": false, "value": "2022-11-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2022-11-18T15:57:59Z", "date_only": false, "value": "2022-11-18T15:57:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3455", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "dac63189-e868-4fc7-9950-4885ebdf14b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\nURL\uff1ahttps://github.com/NCSC-NL/OpenSSL-2022\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3455", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": false, "value": "2022-11-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1041", "record": "CERTFR-2022-AVI-1041", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-11-23T20:23:17Z", "date_only": false, "value": "2022-11-23T20:23:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2022-11-23T20:23:17Z", "date_only": false, "value": "2022-11-23T20:23:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2022-11-23T20:23:22Z", "date_only": false, "value": "2022-11-23T20:23:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2022-11-25T15:19:02Z", "date_only": false, "value": "2022-11-25T15:19:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/2489", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "87c127c9-97b3-431b-a937-ff3a2c1ab12a", "content": "#CVE-2022\nOperational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3\n\nhttps://github.com/NCSC-NL/OpenSSL-2022\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2489"}, {"timestamp": "2022-11-28T19:10:49Z", "date_only": false, "value": "2022-11-28T19:10:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/572", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "94c97b28-4879-4c47-9462-1182bc40b97f", "content": "\u200b\u200bcve-2022-3602-and-cve-2022-3786-openssl-poc\n\nPosted our technical analyses of the two OpenSSL vulns published yesterday, along with a simple PoC repo.\n\n\u25ab\ufe0f CVE-2022-3602: https://attackerkb.com/topics/GMp2yGvZCw/cve-2022-3602/rapid7-analysis\n\u25ab\ufe0f CVE-2022-3786: https://attackerkb.com/topics/CKTqMzGksY/cve-2022-3786/rapid7-analysis\n\nhttps://github.com/rbowes-r7/cve-2022-3602-and-cve-2022-3786-openssl-poc\n\n#cve #poc", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/572", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-07T18:25:02Z", "date_only": false, "value": "2022-12-07T18:25:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/38006", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "46e28e6e-45f4-4120-9a0b-ca7b81081695", "content": "https://github.com/cybersecurityworks553/CVE-2022-3602-and-CVE-2022-3786", "url": "https://t.me/intelexch/38006", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1087", "record": "CERTFR-2022-AVI-1087", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1094", "record": "CERTFR-2022-AVI-1094", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.initial_release_date", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1094", "record": "CERTFR-2022-AVI-1094", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-12-15T00:00:00Z", "date_only": false, "value": "2022-12-15T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-12-15T00:00:00Z", "date_only": false, "value": "2022-12-15T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-15T09:26:43Z", "date_only": false, "value": "2022-12-15T09:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/671", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "0a54c542-a339-4702-ab5a-ee46c2c1f4b6", "content": "\u063a\u0648\u0644\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc \u0632\u06cc\u0645\u0646\u0633 \u0648 \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0628\u06cc\u0634 \u0627\u0632 140 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u062f\u0631 \u062f\u0633\u0627\u0645\u0628\u0631 2022 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\u0632\u06cc\u0645\u0646\u0633 80 \u0646\u0642\u0635 OpenSSL \u0648 OpenSSH \u0631\u0627 \u062f\u0631 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627 \u0631\u0641\u0639 \u06a9\u0631\u062f\n\n\u0632\u06cc\u0645\u0646\u0633\n\n\u0637\u0628\u0642 \u0645\u0639\u0645\u0648\u0644\u060c \u0632\u06cc\u0645\u0646\u0633 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631 \u0628\u06cc\u0634\u062a\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u0648 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631\u06cc \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f. \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635\u060c \u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a 20 \u062a\u0648\u0635\u06cc\u0647 \u062c\u062f\u06cc\u062f \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u062d\u062f\u0648\u062f 140 \u062d\u0641\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u067e\u0631\u062f\u0627\u062e\u062a\u0647 \u0627\u0633\u062a.\n\n\u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0631\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0628\u06cc\u0634 \u0627\u0632 80 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc OpenSSL \u0648 OpenSSH \u06a9\u0647 \u0628\u0631 \u0633\u0648\u0626\u06cc\u0686\u200c\u0647\u0627\u06cc Scalance X-200RNA \u0622\u0646 \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f\u060c \u0622\u06af\u0627\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f . CVE \u0647\u0627\u06cc \u0630\u06a9\u0631 \u0634\u062f\u0647 \u062f\u0631 \u0645\u062d\u062f\u0648\u062f\u0647 \u0645\u0634\u0627\u0648\u0631\u0647 \u0628\u06cc\u0646 \u0633\u0627\u0644 \u0647\u0627\u06cc 2003 \u0648 2019. \u0627\u06cc\u0646 \u062a\u0646\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0627\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631\u062c\u0647 \u0628\u0646\u062f\u06cc \u0634\u062f\u062a \u06a9\u0644\u06cc \u0622\u0646 \"\u0628\u062d\u0631\u0627\u0646\u06cc\" \u0627\u0633\u062a.\n\n\u0647\u0645\u06cc\u0646 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0634\u0634 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u0648 \u0628\u0627\u0644\u0627 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0628\u06cc\u0646 \u0633\u0627\u06cc\u062a\u06cc (XSS)\u060c \u062d\u0645\u0644\u0627\u062a \u0627\u0646\u06a9\u0627\u0631 \u0633\u0631\u0648\u06cc\u0633 (DoS) \u0648 \u0631\u0628\u0648\u062f\u0646 \u062c\u0644\u0633\u0647 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u0646\u062f.\n\n\u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0632\u06cc\u0645\u0646\u0633 \u0628\u0647 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0627\u0637\u0644\u0627\u0639 \u062f\u0627\u062f \u06a9\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc OpenSSL \u0627\u062e\u06cc\u0631\u0627\u064b \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0628\u0627 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc CVE-2022-3602 \u0648 CVE-2022-3786 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f. CVE-2022-3602 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \"\u0628\u062d\u0631\u0627\u0646\u06cc\" \u0637\u0628\u0642\u0647 \u0628\u0646\u062f\u06cc \u0634\u062f\u060c \u0627\u0645\u0627 \u0628\u0639\u062f\u0627 \u0628\u0647 \"\u0628\u0627\u0644\u0627\" \u062a\u0646\u0632\u0644 \u06cc\u0627\u0641\u062a .\n\n\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u06a9\u0647 \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u0634 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u0634\u06a9\u0644\u0627\u062a \u0634\u062f\u06cc\u062f \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a Sicam PAS\u060c Apogee/Talon\u060c Mendix\u060c Teamcenter Visualization\u060c JT2Go\u060c Scalance\u060c Simatic\u060c Parasolid\u060c Ruggedcom \u0648 Simcenter STAR-CCM+ \u0645\u0637\u0644\u0639 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a\u060c \u062d\u0645\u0644\u0627\u062a DoS\u060c \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0648\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u062f\u0631 \u0633\u0631\u0648\u0631 PLM \u0632\u06cc\u0645\u0646\u0633 (\u062f\u06cc\u06af\u0631 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0646\u0645\u06cc\u200c\u0634\u0648\u062f)\u060c \u067e\u0627\u0646\u0644\u200c\u0647\u0627\u06cc \u0645\u06cc\u062f\u0627\u0646 Apogee/Talon\u060c \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc Simatic WinCC OA\u060c Siprotec 5 \u0648 \u0631\u0627\u0647\u200c\u062d\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0686\u0631\u062e\u0647 \u0639\u0645\u0631 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc Polarion \u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a XSS\u060c \u062d\u0645\u0644\u0627\u062a DoS \u0648 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f.\n\n\u0632\u06cc\u0645\u0646\u0633 \u0648\u0635\u0644\u0647 \u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0631\u062e\u06cc \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0627\u0635\u0644\u0627\u062d\u0627\u062a\u06cc \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u0645\u0646\u062a\u0634\u0631 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u06cc\u0627\u0646\u060c \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u06a9\u0627\u0647\u0634\u06cc \u0648 \u0631\u0627\u0647\u200c\u062d\u0644\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\n\n\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u062a\u0646\u0647\u0627 \u0633\u0647 \u062a\u0648\u0635\u06cc\u0647 \u062c\u062f\u06cc\u062f \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0634\u0634 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f.\n\n\u0628\u0631 \u0627\u0633\u0627\u0633 \u0646\u0645\u0631\u0627\u062a CVSS\u060c \u0645\u0647\u0645\u062a\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0686\u0647\u0627\u0631 \u0646\u0642\u0635 \u0645\u0647\u0645 \u0648 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0628\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0646\u0638\u0627\u0631\u062a \u0622\u0646\u0644\u0627\u06cc\u0646 APC Easy UPS \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06cc\u0627 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u0648\u062f.\n\n\u062a\u0648\u0635\u06cc\u0647 \u062f\u0648\u0645 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u062c\u0648\u0632 \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u062a\u0648\u0635\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0648 \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0648\u062f.\n\n\u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 DoS \u0628\u0627 \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u200b\u200b\u0631\u0627 \u062a\u0648\u0635\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0648\u0627\u062d\u062f \u067e\u0627\u06cc\u0627\u0646\u0647 \u0631\u0627\u0647 \u062f\u0648\u0631 Saitel DR (RTU) \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\n\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0633\u06cc\u0633\u062a\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u062f\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "url": "https://t.me/ics_cert/671"}, {"timestamp": "2022-12-15T18:01:05Z", "date_only": false, "value": "2022-12-15T18:01:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3834", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "c6e87e3a-9169-4fa2-ac7c-3a4f972b02ff", "content": "\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u0433\u0438\u0433\u0430\u043d\u0442\u044b Siemens \u0438 Schneider Electric \u0441\u043e\u0440\u0435\u0432\u043d\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437 Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043d\u0430 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u043e\u043b\u044c\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 20 \u043d\u043e\u0432\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 140 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u043b\u044f \u043e\u0434\u043d\u0438\u0445 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 OpenSSL \u0438 OpenSSH, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b Scalance X-200RNA, \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 80 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0441 \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00bb \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u0438 \u0436\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 (XSS), \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0430\u043d\u0441\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Siemens \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0434\u0432\u0443\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c OpenSSL, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c \u043a\u0430\u043a CVE-2022-3602 \u0438 CVE-2022-3786.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Sicam PAS, Apogee/Talon, Mendix, Teamcenter Visualization, JT2Go, Scalance, Simatic, Parasolid, Ruggedcom \u0438 Simcenter STAR-CCM+ \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0438\u0445.\n\n\u0412 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS-\u0430\u0442\u0430\u043a, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0437 \u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u043e\u0437\u0436\u0435, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u0438 \u043b\u043e\u043a\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0433\u0440\u043e\u0437.\n\n\u0412 Schneider Electric \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e 3 \u043d\u043e\u0432\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u0421\u0430\u043c\u0430\u044f \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043a\u043e\u0441\u043d\u0443\u043b\u0430\u0441\u044c \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 APC Easy UPS, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 DoS \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b (RTU) Saitel DR.\n\n\u0414\u043b\u044f \u0432\u0441\u0435\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/3834"}, {"timestamp": "2022-12-19T00:00:00Z", "date_only": false, "value": "2022-12-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1117", "record": "CERTFR-2022-AVI-1117", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-20T12:32:21Z", "date_only": false, "value": "2022-12-20T12:32:21Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2022:4586-1", "record": "SUSE-SU-2022:4586-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2022-12-20T23:00:00Z", "date_only": false, "value": "2022-12-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-005-03", "record": "ICSA-23-005-03", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-005-03", "record": "ICSA-23-005-03", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-005-03", "record": "ICSA-23-005-03", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": false, "value": "2023-01-19T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-019-01", "record": "ICSA-23-019-01", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": true, "value": "2023-01-19", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": false, "value": "2023-01-19T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-019-01", "record": "ICSA-23-019-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": false, "value": "2023-01-19T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-019-01", "record": "ICSA-23-019-01", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-01-19T15:47:00Z", "date_only": false, "value": "2023-01-19T15:47Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-01-24T23:00:00Z", "date_only": false, "value": "2023-01-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "vulnerabilities.52.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-13T16:35:52Z", "date_only": false, "value": "2023-03-13T16:35:52Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2022:7288", "record": "ALSA-2022:7288", "field": "modified", "linked_record": true}, {"timestamp": "2023-03-22T23:00:00Z", "date_only": false, "value": "2023-03-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-04-03T22:00:00Z", "date_only": false, "value": "2023-04-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-05-09T00:00:00Z", "date_only": false, "value": "2023-05-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-05-18T22:00:00Z", "date_only": false, "value": "2023-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2023-05-18T22:00:00Z", "date_only": false, "value": "2023-05-18T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-05-30T22:00:00Z", "date_only": false, "value": "2023-05-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.8.date", "linked_record": true}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0427", "record": "CERTFR-2023-AVI-0427", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-06-13T13:10:24Z", "date_only": false, "value": "2023-06-13T13:10:24Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2022-0065", "record": "RUSTSEC-2022-0065", "field": "modified", "linked_record": true}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "vulnerabilities.12.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-08-08T22:00:00Z", "date_only": false, "value": "2023-08-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.9.date", "linked_record": true}, {"timestamp": "2023-08-13T22:00:00Z", "date_only": false, "value": "2023-08-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.10.date", "linked_record": true}, {"timestamp": "2023-08-17T06:00:00Z", "date_only": false, "value": "2023-08-17T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-229-01", "record": "ICSA-23-229-01", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-08-17T06:00:00Z", "date_only": false, "value": "2023-08-17T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-229-01", "record": "ICSA-23-229-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-08-17T06:00:00Z", "date_only": false, "value": "2023-08-17T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-229-01", "record": "ICSA-23-229-01", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-08-31T12:15:35.563Z", "date_only": false, "value": "2023-08-31T12:15:35.56330Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-3786", "record": "BELL-CVE-2022-3786", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-12-13T01:19:39.834Z", "date_only": false, "value": "2023-12-13T01:19:39.834654Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3786", "record": "GSD-2022-3786", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-18T13:07:01Z", "date_only": false, "value": "2023-12-18T13:07:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1991", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a4703978-64a0-4b11-8c50-a6416ee6ca01", "content": "#ExploitObserverAlert\n\nCVE-2022-3786\n\nDESCRIPTION: Exploit Observer has 37 entries related to CVE-2022-3786. A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\nFIRST-EPSS: 0.000750000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1991"}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.11.date", "linked_record": true}, {"timestamp": "2024-02-16T00:00:00Z", "date_only": false, "value": "2024-02-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0145", "record": "CERTFR-2024-AVI-0145", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2024-02-27T18:07:02Z", "date_only": false, "value": "2024-02-27T18:07:02Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2025-RP22044", "record": "CLEANSTART-2025-RP22044", "field": "modified", "linked_record": true}, {"timestamp": "2024-03-06T11:02:40.764Z", "date_only": false, "value": "2024-03-06T11:02:40.764Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-NODE-2022-3786", "record": "BIT-NODE-2022-3786", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-03-12T00:00:00Z", "date_only": false, "value": "2024-03-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2024-04-24T22:00:00Z", "date_only": false, "value": "2024-04-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.12.date", "linked_record": true}, {"timestamp": "2024-05-14T00:00:00Z", "date_only": false, "value": "2024-05-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2024-06-04T22:00:00Z", "date_only": false, "value": "2024-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.13.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-15T17:46:07.359Z", "date_only": false, "value": "2024-08-15T17:46:07.359+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0561", "record": "WID-SEC-W-2023-0561", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-08-15T17:56:35.841Z", "date_only": false, "value": "2024-08-15T17:56:35.841+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1969", "record": "WID-SEC-W-2023-1969", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T20:36:09Z", "date_only": false, "value": "2024-11-22T20:36:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T20:36:09Z", "date_only": false, "value": "2024-11-22T20:36:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T20:36:09Z", "date_only": false, "value": "2024-11-22T20:36:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_7288", "record": "RHSA-2022_7288", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-22T20:36:17Z", "date_only": false, "value": "2024-11-22T20:36:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-11-22T20:36:17Z", "date_only": false, "value": "2024-11-22T20:36:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-11-22T20:36:17Z", "date_only": false, "value": "2024-11-22T20:36:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022_7384", "record": "RHSA-2022_7384", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2024-11-25T23:00:00Z", "date_only": false, "value": "2024-11-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.14.date", "linked_record": true}, {"timestamp": "2025-01-04T00:00:00Z", "date_only": true, "value": "2025-01-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.2.published_at", "linked_record": true}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.revision_history.15.date", "linked_record": true}, {"timestamp": "2025-01-05T23:00:00Z", "date_only": false, "value": "2025-01-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-01-06T00:00:00Z", "date_only": true, "value": "2025-01-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.3.published_at", "linked_record": true}, {"timestamp": "2025-01-06T09:02:30.465Z", "date_only": false, "value": "2025-01-06T09:02:30.465+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1922", "record": "WID-SEC-W-2022-1922", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": true, "value": "2025-01-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-01-09T00:00:00Z", "date_only": true, "value": "2025-01-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2025-01-10T00:00:00Z", "date_only": false, "value": "2025-01-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0021", "record": "CERTFR-2025-AVI-0021", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-06T00:00:00Z", "date_only": false, "value": "2025-02-06T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": true, "value": "2025-04-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0318", "record": "CERTFR-2025-AVI-0318", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0318", "record": "CERTFR-2025-AVI-0318", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-04-16T08:37:39.412Z", "date_only": false, "value": "2025-04-16T08:37:39.412900Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-04-16T08:37:39.412Z", "date_only": false, "value": "2025-04-16T08:37:39.412900Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-16T08:37:39.412Z", "date_only": false, "value": "2025-04-16T08:37:39.412900Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0123", "record": "NCSC-2025-0123", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-04-23T13:26:54.639Z", "date_only": false, "value": "2025-04-23T13:26:54.639858Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-3786", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-23T13:26:54.639Z", "date_only": false, "value": "2025-04-23T13:26:54.639858Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3786", "record": "FKIE_CVE-2022-3786", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-05T16:12:38.194Z", "date_only": false, "value": "2025-05-05T16:12:38.194Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-3786", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-05T16:19:57Z", "date_only": false, "value": "2025-05-05T16:19:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14905", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "e1735326-e787-425d-85bd-f9cf57a92cde", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3786\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n\n\ud83d\udccf Published: 2022-11-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:12:38.194Z\n\ud83d\udd17 References:\n1. https://www.openssl.org/news/secadv/20221101.txt\n2. https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a", "url": "https://t.me/DarkWebInformer_CVEAlerts/14905", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-10", "record": "ICSA-22-349-10", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-05-06T06:00:00Z", "date_only": false, "value": "2025-05-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-12", "record": "ICSA-22-349-12", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": true, "value": "2025-07-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0622", "record": "CERTFR-2025-AVI-0622", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0622", "record": "CERTFR-2025-AVI-0622", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-08-13T11:28:25.010Z", "date_only": false, "value": "2025-08-13T11:28:25.010339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbpuafm3s2z", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "79f86f48-37d8-4ddd-93e7-db5d6618f35e", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lwbpuafm3s2z"}, {"timestamp": "2025-08-27T18:26:43Z", "date_only": false, "value": "2025-08-27T18:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mrmps/37e0bfc1524af08c45deece8c02b46de", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "f34f02a6-5859-4d92-9744-efb0275c9640", "url": "https://gist.github.com/mrmps/37e0bfc1524af08c45deece8c02b46de"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": true, "value": "2025-09-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": true, "value": "2025-10-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0864", "record": "CERTFR-2025-AVI-0864", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": true, "value": "2025-11-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "vendor_advisories.3.published_at", "linked_record": true}, {"timestamp": "2025-11-04T19:13:08.687Z", "date_only": false, "value": "2025-11-04T19:13:08.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-3786", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0967", "record": "CERTFR-2025-AVI-0967", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": true, "value": "2025-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-11-17T18:18:46.953Z", "date_only": false, "value": "2025-11-17T18:18:46.953512Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-22-349-11", "record": "ICSA-22-349-11", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": true, "value": "2025-11-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": true, "value": "2025-12-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1054", "record": "CERTFR-2025-AVI-1054", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1057", "record": "CERTFR-2025-AVI-1057", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-02-18T06:09:30.635Z", "date_only": false, "value": "2026-02-18T06:09:30.635460Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-3786", "record": "BELL-CVE-2022-3786", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-18T06:09:30.635Z", "date_only": false, "value": "2026-02-18T06:09:30.635460Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-3786", "record": "BELL-CVE-2022-3786", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0199", "record": "CERTFR-2026-AVI-0199", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": true, "value": "2026-02-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0199", "record": "CERTFR-2026-AVI-0199", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0199", "record": "CERTFR-2026-AVI-0199", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-408105", "record": "SSA-408105", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-04-14T08:58:03.787Z", "date_only": false, "value": "2026-04-14T08:58:03.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-3786", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-14T08:58:03.787Z", "date_only": false, "value": "2026-04-14T08:58:03.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2022-3786", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-15T16:33:45.436Z", "date_only": false, "value": "2026-04-15T16:33:45.436947Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-04-16T06:00:00Z", "date_only": false, "value": "2026-04-16T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-04-16T06:00:00Z", "date_only": false, "value": "2026-04-16T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-22-349-09", "record": "ICSA-22-349-09", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-04-22T07:41:22Z", "date_only": false, "value": "2026-04-22T07:41:22Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-3786", "record": "UBUNTU-CVE-2022-3786", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T05:00:18.193Z", "date_only": false, "value": "2026-06-17T05:00:18.193", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3786", "record": "FKIE_CVE-2022-3786", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-26T02:02:36.599Z", "date_only": false, "value": "2026-07-26T02:02:36.599942Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/837", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "588aaf18-844e-47e6-9733-9f812b6fb2bb", "content": "\u0412 OpenSSL \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u041f\u0440\u043e\u0435\u043a\u0442 OpenSSL, \u043a\u0430\u043a \u0438 \u043e\u0431\u0435\u0449\u0430\u043b, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 \u0438 HTTPS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-3602  CVE-2022-3786 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 OpenSSL \u0432\u0435\u0440\u0441\u0438\u0438 3.0.0 \u0438 \u0432\u044b\u0448\u0435 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 OpenSSL 3.0.7.\n\nCVE-2022-3602 \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 4-\u0431\u0430\u0439\u0442\u043e\u0432\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0441\u0442\u0435\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0438\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2022-3786 \u043c\u043e\u0436\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u043c\u0443, \u0447\u0442\u043e\u0431\u044b \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e OpenSSL \u0438\u043b\u0438 \u0436\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u2013 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 TLS \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0436\u0435 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 c \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 Log4Shell \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Apache Log4J. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Wiz.io, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, AWS, GCP, Azure, OCI \u0438 Alibaba Cloud) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 OpenSSL \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432 1,5% \u0432\u0441\u0435\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 OpenSSL.\n\n\u0412\u0435\u0440\u0441\u0438\u0438 OpenSSL, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u0430\u043c\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c Redhat Enterprise Linux 9, Ubuntu 22.04+, CentOS Stream9, Kali 2022.3, Debian 12 \u0438 Fedora 36 \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Akamai.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.openssl.org/news/secadv/20221101.txt \n\nhttps://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #OpenSSL", "url": "https://t.me/EchelonEyes/837"}, {"timestamp": "2026-07-29T12:00:52.999Z", "date_only": false, "value": "2026-07-29T12:00:52.999116Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5832", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "05e099bc-57d9-41c8-ad8b-7f68eba8f5b0", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-3786\nGithub: https://github.com/plharraud/cve-2022-3786\nDescribe: \nA buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.", "url": "https://t.me/CVEhub/5832"}, {"timestamp": "2026-07-29T12:02:37.874Z", "date_only": false, "value": "2026-07-29T12:02:37.874598Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2823", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "508f5e96-1ae2-4e56-a89b-049893c69334", "content": "Operational information regarding CVE-2022-3602 and CVE-2022-3786 (OpenSSL vulns) https://github.com/NCSC-NL/OpenSSL-2022", "url": "https://t.me/reverseame/2823"}, {"timestamp": "2026-07-29T12:03:11.588Z", "date_only": false, "value": "2026-07-29T12:03:11.588808Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2017", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "c26b48b2-0787-4ab4-a90e-57ad358c3112", "content": "\u041e\u0431\u0437\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (31 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u2013 6 \u043d\u043e\u044f\u0431\u0440\u044f) \ud83d\udcd1\n\n1\ufe0f\u20e3 \u0426\u0435\u043d\u0442\u0440 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 UserGate \u0432\u043a\u043b\u044e\u0447\u0438\u043b \u0432 \ud83d\udcbb\u00ab\u0421\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439\u00bb (\u0421\u041e\u0412) UserGate \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \ud83d\udd0e\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-3602 \u0438 CVE-2022-3786.\n\n2\ufe0f\u20e3 \u0421\u0435\u0440\u0432\u0438\u0441 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0422\u0440\u0430\u043d\u0441\u0422\u0435\u043b\u0435\u041a\u043e\u043c \u00ab\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a\u00bb \ud83d\udcc8\u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0438 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \ud83d\udd10\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u0410\u0432\u0430\u043d\u043f\u043e\u0441\u0442\u00bb \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Avanpost PKI, \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u043c\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \ud83d\udd11\u043a\u043b\u044e\u0447\u0435\u0439 (PKI) \u0438\u0437 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430. \n\n4\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f OneSpan \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0438\u0445 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \ud83d\udcbe\u0432\u044b\u0441\u043e\u043a\u043e\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \ud83d\udcf1\u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0439.\n\n5\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Forescout Technologies \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \ud83d\udcbb\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Continuum, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 Forescout Continuum Timeline \u2014 \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435, \u043f\u043e\u0438\u0441\u043a \u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0443 \ud83d\udcc2\u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u0430\u0445.\n\n6\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Persona \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u00ab\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u0438\u00bb \u0441\u0432\u043e\u0435\u0439 \ud83d\udcbd\u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c-\u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043c\u044f\u0433\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \ud83d\udcb3\u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.", "url": "https://t.me/cisoclub/2017"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-XH93530", "record": "CLEANSTART-2026-XH93530", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-31T20:00:04.622Z", "date_only": false, "value": "2026-07-31T20:00:04.622885Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5832", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "ef1c56e2-4cb2-4638-837e-f3db36d433b3", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-3786\nGithub: https://github.com/plharraud/cve-2022-3786\nDescribe: \nA buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.", "url": "https://t.me/CVEhub/5832", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-02T22:20:56.647Z", "date_only": false, "value": "2026-08-02T22:20:56.647678Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2823", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "9b9f6f15-f909-41ef-aa91-f09cab6f8225", "content": "Operational information regarding CVE-2022-3602 and CVE-2022-3786 (OpenSSL vulns) https://github.com/NCSC-NL/OpenSSL-2022", "url": "https://t.me/reverseame/2823", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T21:34:43Z", "date_only": false, "value": "2026-08-04T21:34:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-08-04T21:34:43Z", "date_only": false, "value": "2026-08-04T21:34:43+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-04T21:34:43Z", "date_only": false, "value": "2026-08-04T21:34:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-08-04T21:34:44Z", "date_only": false, "value": "2026-08-04T21:34:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-08-04T21:34:44Z", "date_only": false, "value": "2026-08-04T21:34:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-04T21:34:44Z", "date_only": false, "value": "2026-08-04T21:34:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2022:7384", "record": "RHSA-2022:7384", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-01T17:00:25.357Z", "date_only": false, "value": "2026-09-01T17:00:25.357360Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6298", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "bdf284a3-e13d-4880-8bf0-8b81ae13b81d", "content": "Nothing CRITICAL this time!\nOpenSSL has released patches for 2 new high-severity flaws (CVE-2022-3786 / CVE-2022-3602).\n\nhttps://thehackernews.com/2022/11/just-in-openssl-releases-patch-for-2.html\n\nCVE-2022-3602 has been downgraded from CRITICAL to HIGH as it cannot be exploited in most widely used architectures and platforms.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.10", "url": "https://t.me/cissp/6298"}, {"timestamp": "2026-09-01T20:01:06.813Z", "date_only": false, "value": "2026-09-01T20:01:06.813897Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/85339", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "910140da-6ed7-401a-b5d0-1512c8a762c9", "content": "What is the bug?Continue reading on Medium \u00bb (https://whatthefuzz.medium.com/finding-cve-2022-3786-openssl-with-mayhem-a46e6401eecd?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/85339"}, {"timestamp": "2026-09-01T20:01:11.428Z", "date_only": false, "value": "2026-09-01T20:01:11.428905Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/85337", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "0a80950a-e34e-4c07-84ed-16914f9eae34", "content": "Finding CVE-2022\u20133786 (openssl) with Mayhem\nhttps://whatthefuzz.medium.com/finding-cve-2022-3786-openssl-with-mayhem-a46e6401eecd?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/85337"}, {"timestamp": "2026-09-05T00:00:10.558Z", "date_only": false, "value": "2026-09-05T00:00:10.558680Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/85337", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "88ad51f4-27d1-41b2-b29c-9fc49711535d", "content": "Finding CVE-2022\u20133786 (openssl) with Mayhem\nhttps://whatthefuzz.medium.com/finding-cve-2022-3786-openssl-with-mayhem-a46e6401eecd?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/85337", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T00:00:10.702Z", "date_only": false, "value": "2026-09-05T00:00:10.702386Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/85339", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "437d3a78-fae8-4ace-b3a8-75b60a64e7f1", "content": "What is the bug?Continue reading on Medium \u00bb (https://whatthefuzz.medium.com/finding-cve-2022-3786-openssl-with-mayhem-a46e6401eecd?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/85339", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-17T01:07:20.127Z", "date_only": false, "value": "2026-09-17T01:07:20.127306Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GK72927", "record": "CLEANSTART-2026-GK72927", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T10:30:11.250Z", "date_only": false, "value": "2026-09-18T10:30:11.250041Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-PY31996", "record": "CLEANSTART-2026-PY31996", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GK72927", "record": "CLEANSTART-2026-GK72927", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-XH93530", "record": "CLEANSTART-2026-XH93530", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-GK72927", "record": "CLEANSTART-2026-GK72927", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-XH93530", "record": "CLEANSTART-2026-XH93530", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-09-20T20:39:26Z", "date_only": false, "value": "2026-09-20T20:39:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:26Z", "date_only": false, "value": "2026-09-20T20:39:26Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:34Z", "date_only": false, "value": "2026-09-20T20:39:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:34Z", "date_only": false, "value": "2026-09-20T20:39:34Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12475-1", "record": "OPENSUSE-SU-2024:12475-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:40Z", "date_only": false, "value": "2026-09-20T20:39:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:40Z", "date_only": false, "value": "2026-09-20T20:39:40Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12479-1", "record": "OPENSUSE-SU-2024:12479-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:41Z", "date_only": false, "value": "2026-09-20T20:39:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T20:39:41Z", "date_only": false, "value": "2026-09-20T20:39:41Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12480-1", "record": "OPENSUSE-SU-2024:12480-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:26:30Z", "date_only": false, "value": "2026-09-20T21:26:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:26:30Z", "date_only": false, "value": "2026-09-20T21:26:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14739-1", "record": "OPENSUSE-SU-2025:14739-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:26:31Z", "date_only": false, "value": "2026-09-20T21:26:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:26:31Z", "date_only": false, "value": "2026-09-20T21:26:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14740-1", "record": "OPENSUSE-SU-2025:14740-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-09T04:39:19Z", "date_only": false, "value": "2026-10-09T04:39:19Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-PY31996", "record": "CLEANSTART-2026-PY31996", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-16T09:07:50.945Z", "date_only": false, "value": "2026-10-16T09:07:50.945Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-NODE-2022-3786", "record": "BIT-NODE-2022-3786", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-20T06:47:15Z", "date_only": false, "value": "2026-10-20T06:47:15Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-NT43765", "record": "CLEANSTART-2026-NT43765", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-21T00:36:52.544Z", "date_only": false, "value": "2026-10-21T00:36:52.544853Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-NT43765", "record": "CLEANSTART-2026-NT43765", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-31T14:32:40.024Z", "date_only": false, "value": "2026-10-31T14:32:40.024813Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2025-RP22044", "record": "CLEANSTART-2025-RP22044", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}], "metrics": {"as_of": "2026-11-04T10:16:32.702Z", "anchors": {"origin": {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2022-11-03T04:56:43Z", "date_only": false, "value": "2022-11-03T04:56:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1136", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a1f6f226-26cf-4a94-8b97-cb57b2b8ebaf", "content": "cve-2022-3602 \ncve-2022-3786 - openssl-poc\nDownload POC\n\n#openssl #poc", "url": "https://t.me/proxy_bar/1136", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 478603.0, "hours": 132.9452777777778, "days": 5.539386574074074, "min_seconds": 478603.0, "max_seconds": 478603.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-11-03T04:56:43Z", "date_only": false, "value": "2022-11-03T04:56:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1136", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a1f6f226-26cf-4a94-8b97-cb57b2b8ebaf", "content": "cve-2022-3602 \ncve-2022-3786 - openssl-poc\nDownload POC\n\n#openssl #poc", "url": "https://t.me/proxy_bar/1136", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 67216.0, "hours": 18.67111111111111, "days": 0.777962962962963, "min_seconds": -19184.0, "max_seconds": 67216.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 355216.0, "hours": 98.67111111111112, "days": 4.111296296296296, "min_seconds": 355216.0, "max_seconds": 355216.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 355216.0, "hours": 98.67111111111112, "days": 4.111296296296296, "min_seconds": 355216.0, "max_seconds": 355216.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-28T16:00:00Z", "date_only": false, "value": "2022-10-28T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-OPENSSL-W9SDCC2A", "record": "CISCO-SA-OPENSSL-W9SDCC2A", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -123387.0, "hours": -34.274166666666666, "days": -1.4280902777777778, "min_seconds": -123387.0, "max_seconds": -123387.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-11-03T04:56:43Z", "date_only": false, "value": "2022-11-03T04:56:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1136", "record": "CVE-2022-3786", "field": "creation_timestamp", "uuid": "a1f6f226-26cf-4a94-8b97-cb57b2b8ebaf", "content": "cve-2022-3602 \ncve-2022-3786 - openssl-poc\nDownload POC\n\n#openssl #poc", "url": "https://t.me/proxy_bar/1136", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2022-11-01T18:40:16Z", "date_only": false, "value": "2022-11-01T18:40:16+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2022:7288", "record": "RHSA-2022:7288", "field": "vulnerabilities.1.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}}}