high
CVE-2022-3602
OpenSSL X.509 email-address punycode buffer overflow (4-byte stack overwrite)
- Severity
- high
- Affected product
- OpenSSL
- Affected versions
- OpenSSL ≥ 3.0.0, < 3.0.7
- Fixed in
- OpenSSL 3.0.7
- Added to NewScan
- 2026-08-02
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
COMPONENT VERSION RANGE
NewScan fingerprints OpenSSL from its response and reports this CVE when the detected version falls inside the affected range below.
Backfilled 2026-08-02 (docs/todo.md item 1).
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →