[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv_KVkSGQ5l77dcHO7FzIprHEDCG3XE8pI-dHQrCMLdA":3,"g5a-risk:CVE-2022-4450":154},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":38,"affectedProducts":39,"affectedProductsCount":48,"references":49,"referencesCount":78,"weaknesses":79,"weaknessesCount":88,"isActivelyExploited":89,"cisaInfo":26,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":142,"notableEvents":143},"CVE-2022-4450","What is CVE-2022-4450?","The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data.\nIf the function succeeds then the \"name_out\", \"header\" and \"data\" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue.","The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data. If t...","2023-02-08T20:15:23.973","2025-11-04T20:16:15.06",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.2859,[37,37,37,37,37,35,35],0.20287,"High",[40,44],{"vendor":41,"product":41,"version":42,"criteria":43,"vulnerable":4},"openssl","*","cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":42,"criteria":47,"vulnerable":4},"stormshield","stormshield_network_security","cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",2,[50,56,59,63,66,68,70,74,76],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgit.openssl.org\u002Fgitweb\u002F?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83","Openssl",[54,55],"Patch","Vendor Advisory",{"url":57,"source":52,"tags":58},"https:\u002F\u002Fgit.openssl.org\u002Fgitweb\u002F?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b",[54,55],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202402-08","Gentoo",[],{"url":64,"source":52,"tags":65},"https:\u002F\u002Fwww.openssl.org\u002Fnews\u002Fsecadv\u002F20230207.txt",[55],{"url":51,"source":52,"tags":67},[54,55],{"url":57,"source":52,"tags":69},[54,55],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2023-0003","Sonicwall",[],{"url":60,"source":61,"tags":75},[],{"url":64,"source":52,"tags":77},[55],9,[80],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-415","Double Free","The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.","When a program calls free() twice with the same argument, the program's memory management data structures become corrupted. This corruption can cause the program to crash or, in some circumstances, cause two later calls to malloc() to return the same pointer. If malloc() returns the same value twice and the program later gives the attacker control over the data that is written into this doubly-allocated memory, the program becomes vulnerable to a buffer overflow attack.","Draft","Variant","Simple",1,false,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2022-4450? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-4450, a high severity cyber security vulnerability from 2023. The function PEM_read_bio_ex() reads a PEM file from a BIO a...","CVE-2022-4450, CVE-2022-4450 vulnerability, CVE-2022-4450 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, openssl security, stormshield security, openssl vulnerability, stormshield_network_security vulnerability","\u002Fwhat-is\u002Fcve-2022-4450",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-4450","Cybersecurity","CVE-2022-4450, CVE-2022-4450 vulnerability, CVE-2022-4450 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117,130],{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":120,"Negate":89,"CPEMatch":121},"OR",[122,126],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":124,"VersionEndExcluding":125,"VersionEndIncluding":26},"DE0061D6-8F81-45D3-B254-82A94915FD08","1.1.1","1.1.1t",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":128,"VersionEndExcluding":129,"VersionEndIncluding":26},"A6DC5D88-4E99-48F2-8892-610ACA9B5B86","3.0.0","3.0.8",{"Operator":26,"Negate":26,"Nodes":131},[132],{"Operator":120,"Negate":89,"CPEMatch":133},[134,138],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":26},"F7794B42-8235-4C75-866F-5D0A405F0989","4.0.0","4.3.16",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":26},"C8A23A5D-928A-4225-9C93-31E5DFE215A7","4.4.0","4.6.3",[],[144],{"id":145,"eventType":146,"eventTime":147,"details":148,"label":149,"color":150},"4f8d6cec-065b-435f-90d1-0f03e21bc73a","HIGH_EPSS_DELTA","2026-06-16T04:05:17.405738+00:00","Daily EPSS score increased by 0.203 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":152,"version":153},1792243691458,"2.0",{"score":155,"band":156,"action":157,"scoredAt":158},42,"Medium","Plan remediation","2026-10-16T06:57:05.547836+00:00"]