drago-96/CVE-2022-0778

Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt

SmartyCShell
This is stars and forks stats for /drago-96/CVE-2022-0778 repository. As of 29 Apr, 2024 this repository has 189 stars and 52 forks.

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BN_mod_sqrt() of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with points in compressed format: while parsing this type of keys, OpenSSL will try to expand the compressed point, trying to compute a square root modulo the prime p over which the curve is defined. However,...
Read on GithubGithub Stats Page
repotechsstarsweeklyforksweekly
Alfresco/acs-deploymentSmarty16002370
truecharts/catalogSmartyShell21102160
compound-finance/compound-protocolTypeScriptSolidityJavaScript1.8k01.2k0
bazelbuild/rules_protoStarlarkC++Shell1460680
bazelruby/rules_rubyStarlarkShellRuby930340
grailbio/bazel-compilation-databaseStarlarkPythonShell43001080
cncf/udpaStarlarkGoC++2230720
tweag/rules_haskellStarlarkHaskellPython2540770
bazelbuild/starlarkStarlarkPythonShell2k+3145+2
hexojs/siteStylusNunjucksJavaScript643-11.3k+2