FORTINET Security Advisory
Published Date: Not specified
CVE: CVE-2022-0778
Advisory Summary
🔶 Vulnerability & Market Signal (DoS risk in OpenSSL parsing)
Fortinet PSIRT disclosed CVE-2022-0778 (CVSSv3 7.5), impacting OpenSSL versions used in some Fortinet products. The issue is an infinite loop in BNmodsqrt() when processing modular square roots for certain non-prime moduli.
- TLS client/server certificates containing EC parameters
- Certificate requests (e.g., CA/subscriber flows)
- Private keys with attacker-controlled explicit elliptic-curve parameters
- Any system parsing ASN.1 elliptic curve parameters that reaches the vulnerable code path
⚠️ Why this matters in data center & infrastructure environments
This creates a practical DoS vector against systems that accept externally provided certificates/keys—relevant to: load balancers, reverse proxies, PKI workflows, hosting platforms that ingest customer certificates, and TLS termination services. Even if the certificate signature is later rejected, the device may still be forced into an infinite loop during parsing.
- Affected OpenSSL lines: 1.0.2, 1.1.1, 3.0
- Fixes were released in:
- OpenSSL 1.1.1n
- OpenSSL 3.0.2
- OpenSSL 1.0.2zd
- Map exposure: verify whether your Fortinet product build uses an affected OpenSSL version.
- Patch/upgrade: move to the Fortinet-supported builds containing the fixed OpenSSL versions (per the advisory).
- Harden parsing paths: where feasible, restrict/validate inbound certificate/key handling to reduce the chance of attacker-controlled malformed inputs.
- Monitor for symptoms: watch for CPU pegging / stalled TLS handshakes correlated with certificate parsing events.
📌
-2022-0778
Reference: Vendor Advisory