CVE-2022-1292

CVE-2022-1292 describes a command injection vulnerability in the c_rehash script, which fails to properly sanitize shell metacharacters. This flaw affects OpenSSL versions 3.0.0-3.0.2, 1.1.1-1.1.1n, and 1.0.2-1.0.2zd, and is distributed by operating systems like Debian, Fedora, and Oracle. With a CVSS score of 7.3 (HIGH), successful exploitation could lead to arbitrary command execution with the script's privileges, particularly on systems where c_rehash is automatically executed. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness.