VMware Response to CVE-2022-3602 and CVE-2022-3786: vulnerabilities in OpenSSL 3.0.x.

Products

• VMware

Issue/Introduction

On November, 1st 2022 the OpenSSL Project disclosed CVE-2022-3602 and CVE-2022-3786 - potentially critical severity vulnerabilities in OpenSSL 3.0.x:

Resolution

The VMware Security Response Center (VSRC) has published a statement in coordination with the OpenSSL disclosure that can be viewed here: https://blogs.vmware.com/security/2022/11/vmware-response-to-cve-2022-3602-and-cve-2022-3786-vulnerabilities-in-openssl-3-0-x.html

Additional Information

Change log:

November 1st 2022: Initial publication.