Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2022-1343: The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response

49
This month
MEDIUM 5.3REMOTEWATCHLISTUPGRADEMITIGATEMITIGATE

CVE-2022-1343 is a medium-severity flaw (CVSS 5.3) affecting openssl, active iq unified manager, clustered data ontap. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a neg

Why this priority

  • Remotely exploitable, no login, no user action
  • On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score5.3 (Medium)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance2.1% (top 18%)
CISA exploited listNo
WeaknessCWE-295
Published2022-05-03
Last modified2026-10-14
Publisher (CNA): OpenSSL Software Foundation · Vendor: netapp · openssl

Share: LinkedIn · X · Reddit

Last updated 2026-10-14 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

openssl openssl UPGRADE
Affected: >= 3.0.0 and < 3.0.3
Fixed in: 3.0.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy openssl || rpm -q openssl || openssl --version
2. UPGRADE to 3.0.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade openssl
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade openssl
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
netapp active iq unified manager MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy active-iq-unified-manager || rpm -q active-iq-unified-manager || active-iq-unified-manager --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
netapp clustered data ontap MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy clustered-data-ontap || rpm -q clustered-data-ontap || clustered-data-ontap --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
netapp clustered data ontap antivirus connector MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy clustered-data-ontap-antivirus-connector || rpm -q clustered-data-ontap-antivirus-connector || clustered-data-ontap-antivirus-connector --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
netapp santricity smi-s provider MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy santricity-smi-s-provider || rpm -q santricity-smi-s-provider || santricity-smi-s-provider --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
netapp smi-s provider MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy smi-s-provider || rpm -q smi-s-provider || smi-s-provider --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-1343?

openssl: upgrade to 3.0.3; active iq unified manager: mitigate or apply the listed mitigation; clustered data ontap: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2022-1343 being exploited?

CVE-2022-1343 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-1343 affect?

CVE-2022-1343 affects openssl, active iq unified manager, clustered data ontap. Severity is medium (CVSS 5.3). The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case whe

How urgent is CVE-2022-1343?

Priority 49/100. Remotely exploitable, no login, no user action; On your watchlist

Software pages

OpenSSL vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.