{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuf\u00fchren, Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0071 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0071.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0071 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0071"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2075-1 vom 2022-06-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011282.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2068-1 vom 2022-06-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011281.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20220602-0009 vom 2022-06-02",
        "url": "https://security.netapp.com/advisory/ntap-20220602-0009/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5139 vom 2022-05-17",
        "url": "https://lists.debian.org/debian-security-announce/2022/msg00107.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2022-1801 vom 2022-06-07",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1801.html"
      },
      {
        "category": "external",
        "summary": "Node.js Release 18.2.0 vom 2022-05-17",
        "url": "https://nodejs.org/en/blog/release/v18.2.0/"
      },
      {
        "category": "external",
        "summary": "Exploit auf Sploitus.com",
        "url": "https://sploitus.com/exploit?id=4012995B-2E6C-5B0B-A5D0-B0B4278FDFF8"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5402-2 vom 2022-05-26",
        "url": "https://ubuntu.com/security/notices/USN-5402-2"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2106-1 vom 2022-06-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011304.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2098-1 vom 2022-06-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011296.html"
      },
      {
        "category": "external",
        "summary": "OpenSSL Security Advisory vom 2022-05-03",
        "url": "https://www.openssl.org/news/secadv/20220503.txt"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5402-1 vom 2022-05-04",
        "url": "https://ubuntu.com/security/notices/USN-5402-1"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3008 vom 2022-05-15",
        "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2182-1 vom 2022-06-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011355.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2197-1 vom 2022-06-28",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011370.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2251-1 vom 2022-07-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011387.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2306-1 vom 2022-07-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011432.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2308-1 vom 2022-07-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011417.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1605 vom 2022-07-07",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1605.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2321-1 vom 2022-07-07",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011468.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1815 vom 2022-07-15",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1815.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-5818 vom 2022-08-03",
        "url": "http://linux.oracle.com/errata/ELSA-2022-5818.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5818 vom 2022-08-03",
        "url": "https://access.redhat.com/errata/RHSA-2022:5818"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-123 vom 2022-08-05",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-123.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1626 vom 2022-08-05",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1626.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-104 vom 2022-08-05",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-104.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-105 vom 2022-08-05",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-105.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9683 vom 2022-08-05",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9683.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2022-1832 vom 2022-08-08",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1832.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2022-1831 vom 2022-08-08",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1831.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20220729-0004 vom 2022-08-19",
        "url": "https://security.netapp.com/advisory/ntap-20220729-0004/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6188 vom 2022-08-25",
        "url": "https://access.redhat.com/errata/RHSA-2022:6188"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6184 vom 2022-08-25",
        "url": "https://access.redhat.com/errata/RHSA-2022:6184"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6224 vom 2022-08-30",
        "url": "https://access.redhat.com/errata/RHSA-2022:6224"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-6224 vom 2022-08-31",
        "url": "http://linux.oracle.com/errata/ELSA-2022-6224.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2251-2 vom 2022-09-01",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-September/012050.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6182 vom 2022-09-06",
        "url": "https://access.redhat.com/errata/RHSA-2022:6182"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6183 vom 2022-09-06",
        "url": "https://access.redhat.com/errata/RHSA-2022:6183"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5172-1 vom 2022-09-10",
        "url": "https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-712-released-1300703171"
      },
      {
        "category": "external",
        "summary": "Sophos Security Advisory vom 2022-09-07",
        "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-18-5-4"
      },
      {
        "category": "external",
        "summary": "PRTG Release Notes vom 2022-09-14",
        "url": "https://www.paessler.com/prtg/history/stable"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2022-19 vom 2022-09-21",
        "url": "https://www.tenable.com/security/tns-2022-19"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6622079 vom 2022-09-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-openssl-affect-ibm-spectrum-protect-plus-sql-file-indexing-and-windows-host-agents/"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202210-02 vom 2022-10-16",
        "url": "https://security.gentoo.org/glsa/202210-02"
      },
      {
        "category": "external",
        "summary": "Oracle Solaris Third Party Bulletin-October 2022 vom 2022-10-18",
        "url": "https://www.oracle.com/security-alerts/bulletinoct2022.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7058 vom 2022-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2022:7058"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7055 vom 2022-10-19",
        "url": "https://access.redhat.com/errata/RHSA-2022:7055"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-195 vom 2022-11-04",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2022-195.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:8781 vom 2022-12-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:8781"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:8841 vom 2022-12-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:8841"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:8840 vom 2022-12-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:8840"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:8913 vom 2022-12-12",
        "url": "https://access.redhat.com/errata/RHSA-2022:8913"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:8917 vom 2022-12-12",
        "url": "https://access.redhat.com/errata/RHSA-2022:8917"
      },
      {
        "category": "external",
        "summary": "Juniper Security Bulletin JSA70186 vom 2023-01-12",
        "url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-Multiple-vulnerabilities-resolved-in-OpenSSL?language=en_US"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6855297 vom 2023-01-13",
        "url": "https://www.ibm.com/support/pages/node/6855297"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6857607 vom 2023-01-25",
        "url": "https://www.ibm.com/support/pages/node/6857607"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2023-10 vom 2023-03-07",
        "url": "https://www.tenable.com/security/tns-2023-10"
      },
      {
        "category": "external",
        "summary": "Dell Knowledge Base Article",
        "url": "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2023-129 vom 2023-08-01",
        "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-129/index.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7108821 vom 2024-01-17",
        "url": "https://www.ibm.com/support/pages/node/7108821"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASOPENSSL-SNAPSAFE-2023-001 vom 2023-09-27",
        "url": "https://alas.aws.amazon.com/AL2/ALASOPENSSL-SNAPSAFE-2023-001.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5982 vom 2023-10-21",
        "url": "https://access.redhat.com/errata/RHSA-2023:5982"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6457-1 vom 2023-10-30",
        "url": "https://ubuntu.com/security/notices/USN-6457-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6818 vom 2023-11-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:6818"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-13024 vom 2023-12-07",
        "url": "https://linux.oracle.com/errata/ELSA-2023-13024.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-13025 vom 2023-12-07",
        "url": "https://linux.oracle.com/errata/ELSA-2023-13025.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-32790 vom 2023-12-07",
        "url": "https://linux.oracle.com/errata/ELSA-2023-32790.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-13026 vom 2023-12-07",
        "url": "https://linux.oracle.com/errata/ELSA-2023-13026.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-13027 vom 2023-12-07",
        "url": "https://linux.oracle.com/errata/ELSA-2023-13027.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2024-2502 vom 2024-03-19",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2502.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12343 vom 2024-04-25",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12343.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-20865 vom 2024-04-25",
        "url": "https://linux.oracle.com/errata/ELSA-2024-20865.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12409 vom 2024-06-04",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12409.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12408 vom 2024-06-05",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12408.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-23120 vom 2024-06-04",
        "url": "https://linux.oracle.com/errata/ELSA-2024-23120.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7018-1 vom 2024-09-18",
        "url": "https://ubuntu.com/security/notices/USN-7018-1"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12842 vom 2024-11-25",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12842.html"
      }
    ],
    "source_lang": "en-US",
    "title": "OpenSSL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-11-25T23:00:00.000+00:00",
      "generator": {
        "date": "2024-11-26T09:24:45.433+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2022-0071",
      "initial_release_date": "2022-05-03T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-05-03T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-05-04T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-05-15T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-05-17T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Debian und Node.js aufgenommen"
        },
        {
          "date": "2022-05-18T22:00:00.000+00:00",
          "number": "5",
          "summary": "Referenz(en) aufgenommen: 2087912, 2087911, 2087913"
        },
        {
          "date": "2022-05-24T22:00:00.000+00:00",
          "number": "6",
          "summary": "Exploit aufgenommen"
        },
        {
          "date": "2022-05-26T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-06-02T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-06-07T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-06-13T22:00:00.000+00:00",
          "number": "10",
          "summary": "Referenz(en) aufgenommen: FEDORA-2022-B651CB69E6, FEDORA-2022-C9C02865F6"
        },
        {
          "date": "2022-06-14T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-06-16T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-06-26T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-06-27T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-07-04T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-07-06T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-07-07T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Amazon und SUSE aufgenommen"
        },
        {
          "date": "2022-07-14T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-08-02T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-08-03T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-08-04T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-08-07T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-08-08T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-08-21T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-08-25T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-08-30T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2022-09-01T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-09-06T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-09-11T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-09-12T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-09-14T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-09-20T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Tenable aufgenommen"
        },
        {
          "date": "2022-09-21T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-10-16T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2022-10-18T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-10-19T22:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-11-06T23:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-12-07T23:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-12-08T23:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-12-12T23:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-01-11T23:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von Juniper aufgenommen"
        },
        {
          "date": "2023-01-12T23:00:00.000+00:00",
          "number": "42",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-01-25T23:00:00.000+00:00",
          "number": "43",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-03-07T23:00:00.000+00:00",
          "number": "44",
          "summary": "Neue Updates von Tenable aufgenommen"
        },
        {
          "date": "2023-07-31T22:00:00.000+00:00",
          "number": "45",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2023-09-27T22:00:00.000+00:00",
          "number": "46",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-10-22T22:00:00.000+00:00",
          "number": "47",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-10-30T23:00:00.000+00:00",
          "number": "48",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-11-08T23:00:00.000+00:00",
          "number": "49",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-12-07T23:00:00.000+00:00",
          "number": "50",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-01-17T23:00:00.000+00:00",
          "number": "51",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-01-25T23:00:00.000+00:00",
          "number": "52",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2024-03-18T23:00:00.000+00:00",
          "number": "53",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2024-04-24T22:00:00.000+00:00",
          "number": "54",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-06-04T22:00:00.000+00:00",
          "number": "55",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-09-17T22:00:00.000+00:00",
          "number": "56",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-11-25T23:00:00.000+00:00",
          "number": "57",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "57"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c19.10",
                "product": {
                  "name": "Dell NetWorker \u003c19.10",
                  "product_id": "T032354"
                }
              },
              {
                "category": "product_version",
                "name": "19.1",
                "product": {
                  "name": "Dell NetWorker 19.10",
                  "product_id": "T032354-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:19.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Ops Center",
            "product": {
              "name": "Hitachi Ops Center",
              "product_id": "T017562",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:ops_center:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "11.7",
                "product": {
                  "name": "IBM InfoSphere Information Server 11.7",
                  "product_id": "444803",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:infosphere_information_server:11.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "InfoSphere Information Server"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.0.5-ISS-ISVA-FP000",
                "product": {
                  "name": "IBM Security Verify Access \u003c10.0.5-ISS-ISVA-FP000",
                  "product_id": "T025829"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.5-ISS-ISVA-FP000",
                "product": {
                  "name": "IBM Security Verify Access 10.0.5-ISS-ISVA-FP000",
                  "product_id": "T025829-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_verify_access:10.0.5-iss-isva-fp000"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "10.0.0.0-10.0.6.1",
                "product": {
                  "name": "IBM Security Verify Access 10.0.0.0-10.0.6.1",
                  "product_id": "T031895",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_verify_access:10.0.0.0_-_10.0.6.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Verify Access"
          },
          {
            "category": "product_name",
            "name": "IBM Spectrum Protect",
            "product": {
              "name": "IBM Spectrum Protect",
              "product_id": "T013661",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spectrum_protect:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Evolved",
                "product": {
                  "name": "Juniper JUNOS Evolved",
                  "product_id": "T018886",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:juniper:junos:evolved"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "JUNOS"
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "T016960",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.2.0",
                "product": {
                  "name": "Open Source Node.js \u003c18.2.0",
                  "product_id": "T023264"
                }
              },
              {
                "category": "product_version",
                "name": "18.2.0",
                "product": {
                  "name": "Open Source Node.js 18.2.0",
                  "product_id": "T023264-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nodejs:nodejs:18.2.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Node.js"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.0.3",
                "product": {
                  "name": "Open Source OpenSSL \u003c3.0.3",
                  "product_id": "T023059"
                }
              },
              {
                "category": "product_version",
                "name": "3.0.3",
                "product": {
                  "name": "Open Source OpenSSL 3.0.3",
                  "product_id": "T023059-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openssl:openssl:3.0.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.1.1o",
                "product": {
                  "name": "Open Source OpenSSL \u003c1.1.1o",
                  "product_id": "T023060"
                }
              },
              {
                "category": "product_version",
                "name": "1.1.1o",
                "product": {
                  "name": "Open Source OpenSSL 1.1.1o",
                  "product_id": "T023060-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openssl:openssl:1.1.1o"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.0.2ze",
                "product": {
                  "name": "Open Source OpenSSL \u003c1.0.2ze",
                  "product_id": "T023061"
                }
              },
              {
                "category": "product_version",
                "name": "1.0.2ze",
                "product": {
                  "name": "Open Source OpenSSL 1.0.2ze",
                  "product_id": "T023061-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openssl:openssl:1.0.2ze"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenSSL"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Oracle Solaris",
            "product": {
              "name": "Oracle Solaris",
              "product_id": "T002965",
              "product_identification_helper": {
                "cpe": "cpe:/a:oracle:solaris:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c22.3.79.2108",
                "product": {
                  "name": "Paessler PRTG \u003c22.3.79.2108",
                  "product_id": "T024603"
                }
              },
              {
                "category": "product_version",
                "name": "22.3.79.2108",
                "product": {
                  "name": "Paessler PRTG 22.3.79.2108",
                  "product_id": "T024603-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:paessler_ag:prtg:22.3.79.2108"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PRTG"
          }
        ],
        "category": "vendor",
        "name": "Paessler"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenShift",
            "product": {
              "name": "Red Hat OpenShift",
              "product_id": "T008027",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openshift:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.5.4",
                "product": {
                  "name": "Sophos Firewall \u003c18.5.4",
                  "product_id": "T024538"
                }
              },
              {
                "category": "product_version",
                "name": "18.5.4",
                "product": {
                  "name": "Sophos Firewall 18.5.4",
                  "product_id": "T024538-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:sophos:firewall:18.5.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Firewall"
          }
        ],
        "category": "vendor",
        "name": "Sophos"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "8.15.9",
                "product": {
                  "name": "Tenable Security Nessus 8.15.9",
                  "product_id": "T026648",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:8.15.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Nessus"
          },
          {
            "category": "product_name",
            "name": "Tenable Security Nessus Network Monitor",
            "product": {
              "name": "Tenable Security Nessus Network Monitor",
              "product_id": "T016632",
              "product_identification_helper": {
                "cpe": "cpe:/a:tenable:nessus_network_monitor:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Tenable Security"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1292",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL. Das \"c_rehash\"-Skript bereinigt Eingaben nicht ausreichend, sodass in Folge eine Command-Injection durchgef\u00fchrt werden kann. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T031895",
          "67646",
          "T016632",
          "T004914",
          "T013661",
          "T025829",
          "T018886",
          "T026648",
          "T024603",
          "398363",
          "T023059",
          "T023060",
          "T023061",
          "T008027",
          "T002965",
          "T012167",
          "T016960",
          "T032354",
          "T017562",
          "T024538",
          "2951",
          "T002207",
          "T000126",
          "444803",
          "T023264"
        ]
      },
      "release_date": "2022-05-03T22:00:00.000+00:00",
      "title": "CVE-2022-1292"
    },
    {
      "cve": "CVE-2022-1343",
      "notes": [
        {
          "category": "description",
          "text": "In OpenSSL existieren mehrere Schwachstellen. Es treten Fehler bei der Verarbeitung von OCSP-Antworten sowie bei der Implementierung der RC4-MD5-Ciphersuite auf. In Folge kann ein Angreifer Man-in-the-Middle einnehmen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T008027",
          "T031895",
          "67646",
          "T002965",
          "T012167",
          "T016632",
          "T004914",
          "T013661",
          "T016960",
          "T025829",
          "T032354",
          "T017562",
          "T024538",
          "T018886",
          "2951",
          "T002207",
          "T026648",
          "T000126",
          "444803",
          "T024603",
          "398363",
          "T023059",
          "T023264"
        ]
      },
      "release_date": "2022-05-03T22:00:00.000+00:00",
      "title": "CVE-2022-1343"
    },
    {
      "cve": "CVE-2022-1434",
      "notes": [
        {
          "category": "description",
          "text": "In OpenSSL existieren mehrere Schwachstellen. Es treten Fehler bei der Verarbeitung von OCSP-Antworten sowie bei der Implementierung der RC4-MD5-Ciphersuite auf. In Folge kann ein Angreifer Man-in-the-Middle einnehmen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T008027",
          "T031895",
          "67646",
          "T002965",
          "T012167",
          "T016632",
          "T004914",
          "T013661",
          "T016960",
          "T025829",
          "T032354",
          "T017562",
          "T024538",
          "T018886",
          "2951",
          "T002207",
          "T026648",
          "T000126",
          "444803",
          "T024603",
          "398363",
          "T023059",
          "T023264"
        ]
      },
      "release_date": "2022-05-03T22:00:00.000+00:00",
      "title": "CVE-2022-1434"
    },
    {
      "cve": "CVE-2022-1473",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL. Es besteht ein Fehler in der Funktion \"OPENSSL_LH_flush\", der dazu f\u00fchren kann, dass ein Zugriff auf bereits befreiten Speicher versucht wird. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T008027",
          "T031895",
          "67646",
          "T002965",
          "T012167",
          "T016632",
          "T004914",
          "T013661",
          "T016960",
          "T025829",
          "T032354",
          "T017562",
          "T024538",
          "T018886",
          "2951",
          "T002207",
          "T026648",
          "T000126",
          "444803",
          "T024603",
          "398363",
          "T023059",
          "T023264"
        ]
      },
      "release_date": "2022-05-03T22:00:00.000+00:00",
      "title": "CVE-2022-1473"
    }
  ]
}