gost engine vulnerabilities and fixes

Recent CVEs affecting gost engine, with upgrade or downgrade steps. 1 tracked.

Also searched as: gostengine.

gost engine has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-05-24. Highest priority: CVE-2022-29242 (score 50/100).

• CVE-2022-29242 MEDIUM 5.9 UPGRADE GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL

FAQ

How do I fix gost engine vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gost engine being exploited right now?

None of the tracked gost engine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gost engine CVE should I patch first?

CVE-2022-29242 currently ranks highest (50/100): GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL.

← Back to latest CVEs