CVEs-PoC/2022/CVE-2022-2274.md

CVE-2022-2274

Description

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/DesmondSanctity/CVE-2022-2274
• https://github.com/EkamSinghWalia/OpenSSL-Vulnerability-Detection-Script
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Malwareman007/CVE-2022-2274
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/SYRTI/POC_to_review
• https://github.com/WhooAmii/POC_to_review
• https://github.com/Z0fhack/Goby_POC
• https://github.com/chnzzh/OpenSSL-CVE-lib
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve