{"id":19404,"date":"2026-10-03T16:03:34","date_gmt":"2026-10-03T07:03:34","guid":{"rendered":"https:\/\/www.bigriver.jp\/?p=19404"},"modified":"2026-10-03T16:03:36","modified_gmt":"2026-10-03T07:03:36","slug":"alibaba-cloud-security-center-42-cve-2022-1292openssl-openssl-improper-neutralization-of-special-elements-used-in-an-os-command","status":"publish","type":"post","link":"https:\/\/www.bigriver.jp\/?p=19404","title":{"rendered":"Alibaba Cloud Security Center #42 CVE-2022-1292:openssl openssl improper neutralization of special elements used in an os command"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Alibaba Cloud Security Center \u304b\u3089 High Risk \u3068\u3057\u3066\u201dCVE-2022-1292:openssl openssl improper neutralization of special elements used in an os command (\u2018os command injection\u2019)\u201d \u306e\u5bfe\u51e6\u3092\u6c42\u3081\u3089\u308c\u3066\u304a\u308a\u3001Security Score \u304c \u201c-3\u2033\u6e1b\u70b9\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3000\u3000\u3053\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u3066\u3044\u304f\u8a71\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"688\" height=\"173\" src=\"https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-58.png\" alt=\"\" class=\"wp-image-19410\" srcset=\"https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-58.png 688w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-58-300x75.png 300w\" sizes=\"auto, (max-width: 688px) 100vw, 688px\"><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u306e\u8106\u5f31\u6027\u304c Security Center \u304b\u3089\u8b66\u544a\u3055\u308c\u305f\u306e\u306f2026\u5e741\u6708\u3067\u3059\u3002\u4eca\u65e5\u306f10\u6708\u306a\u306e\u3067\u7d049\u304b\u6708\u524d\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-sango-with-big-shadow\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"561\" src=\"https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-56-1024x561.png\" alt=\"\" class=\"wp-image-19406\" srcset=\"https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-56-1024x561.png 1024w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-56-300x164.png 300w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-56-767x420.png 767w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-56-940x515.png 940w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-56.png 1168w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\"><\/figure>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u30001\u6708\u306e\u6642\u70b9\u3067\u5b9f\u8cea\u7684\u306b\u554f\u984c\u304c\u306a\u3044\u3053\u3068\u304c\u308f\u304b\u3063\u3066\u3044\u305f\u306e\u3067\u653e\u7f6e\u3057\u3066\u3044\u305f\u306e\u3067\u3059\u304c\u3001\u3053\u3053\u6700\u8fd1\u3067<strong>\u201d\u5b9f\u8cea\u7684\u306b\u554f\u984c\u304c\u306a\u3044\u201d\u306e\u30ec\u30d9\u30eb\u611f\u304c\u5909\u308f\u3063\u3066\u304d\u305f\u305f\u3081<\/strong>\u5bfe\u51e6\u3059\u308b\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u79c1\u304c1\u6708\u306b\u201d\u5b9f\u8cea\u7684\u306b\u554f\u984c\u304c\u306a\u3044\u201d\u3068\u5224\u65ad\u3057\u305f\u7406\u7531\u306f\u3001\u4eca\u56de\u306e\u8106\u5f31\u6027\u306e\u539f\u56e0\u3068\u306a\u308b libssl1.1\u3092\u5916\u90e8\u306b\u8868\u51fa\u3057\u3066\u3044\u308b Apache \u3084\u4ed6\u30b5\u30fc\u30d3\u30b9\u3067\u306f\u5229\u7528\u3057\u3066\u3044\u306a\u3044\u305f\u3081\u3067\u3057\u305f\u3002\u3000\u8106\u5f31\u6027\u304c\u3042\u308b\u30e9\u30a4\u30d6\u30e9\u30ea\u306f\u30b7\u30b9\u30c6\u30e0\u4e0a\u306b\u5b58\u5728\u3059\u308b\u3051\u3069\u3001\u30d5\u30a1\u30a4\u30eb\u3068\u3057\u3066\u7f6e\u304b\u308c\u3066\u3044\u308b\u3060\u3051\u3067\u5916\u90e8\u306b\u898b\u3048\u3066\u3044\u306a\u3044\u3001\u5185\u90e8\u7684\u306b\u3082\u30b5\u30fc\u30d3\u30b9\u3001daemon\u304b\u3089\u3082Load\u3057\u3066\u3044\u306a\u3044\u3001\u3060\u304b\u3089\u512a\u5148\u5ea6\u306f\u4f4e\u3044\u3068\u3044\u3046\u3002\u3000\u3000<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3067\u3082\u4eca\u306f\u305d\u308c\u304c\u5f31\u70b9\u3068\u3057\u3066\u4f7f\u308f\u308c\u3066\u3057\u307e\u3046\u3001\u8907\u6570\u306e\u5c0f\u30fb\u4e2d\u306e\u8106\u5f31\u6027\u3092\u7d44\u307f\u5408\u308f\u305b\u3066\u3001\u3055\u3089\u306b\u4eba\u9593\u3060\u3068\u96e3\u3057\u3044\u30bf\u30a4\u30df\u30f3\u30b0\u3084\u81a8\u5927\u306a\u8a66\u884c\u932f\u8aa4\u3082\u77ed\u6642\u9593\u3067\u884c\u3048\u305f\u308a\u3057\u307e\u3059\u3002\u3000\u7c21\u5358\u306b\u3044\u3048\u3070\u3053\u308c\u307e\u3067\u306e\u5e38\u8b58\u3001\u3053\u3053\u307e\u3067\u3084\u3063\u3066\u304a\u3051\u3070\u5927\u4e08\u592b\u3060\u308d\u3046\u3001\u304c\u5d29\u308c\u3064\u3064\u3042\u308b\u3068\u3044\u3046\u611f\u89e6\u3092\u3082\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u307e\u305a\u3001\u3053\u306e libssl1.1 \u304c\u3069\u3053\u3067\u4f7f\u308f\u308c\u3066\u3044\u308b\u304b\u306f \u201capt-cache\u201d\u30b3\u30de\u30f3\u30c9\u3067\u78ba\u8a8d\u53ef\u80fd\u3067\u3059\u3002\u3000<\/p>\n\n\n\n<div class=\"wp-block-sgb-codebox pre_tag\"><span><i class=\"fa fa-code\"><\/i>bash<\/span><pre><code><strong># apt-cache rdepends libssl1.1\n<\/strong>libssl1.1\nReverse Depends:\n  crda\n  ntp\n  mysql-server-5.7\n  libzip4\n  libpython3.8-minimal<\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">crda,ntp,mysql-server-5.7,libzip4,libpython3.8-minimal \u3067libssl1.1\u304c\u5229\u7528\u3055\u308c\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002\u3000mysql\u306f\u4e00\u6642\u671f\u3001\u4eee\u60f3\u30de\u30b7\u30f3\u4e0a\u3067\u52d5\u4f5c\u3055\u305b\u3066\u3044\u305f\u3082\u306e\u304c\u4f7f\u308f\u306a\u3044\u307e\u307e\u6b8b\u3063\u3066\u3044\u308b\u3082\u306e\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ed6\u306ePKG\u3082\u4eca\u5229\u7528\u3057\u3066\u3044\u308b Ubuntu 22.04 \u306e\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u4f7f\u308f\u308c\u3066\u3044\u305f\u3082\u306e\u304c\u6b8b\u9ab8\u3068\u3057\u3066\u6b8b\u3063\u3066\u3044\u308b\u3082\u306e\u3067\u3059\u3002\u3053\u308c\u3089\u306f\u3059\u3079\u3066\u524a\u9664\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n\n\n<div id=\"id-3819f9fa-297e-427b-bdb8-bf16e69f6493\">\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>PKG<\/th><th>Ubuntu 22.04 \u3067\u306e\u6271\u3044\u3068\u73fe\u72b6<\/th><th>\u5fc5\u8981\u6027<\/th><\/tr><\/thead><tbody><tr><td><strong><code>libpython3.8-minimal<\/code><\/strong><\/td><td>Ubuntu 22.04 \u306e\u6a19\u6e96 Python \u306f <strong>3.10<\/strong> \u3067\u3059\u3002Python 3.8 \u306f1\u4e16\u4ee3\u524d\u306e\u53e4\u3044\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3059\u3002<\/td><td>\u73fe\u5728\u306e\u6a19\u6e96\uff083.10\uff09\u304c\u52d5\u3044\u3066\u3044\u308b\u305f\u3081\u30013.8 \u7cfb\u7d71\u306e\u30e9\u30a4\u30d6\u30e9\u30ea\u306f\u4e0d\u8981\u3067\u3059\u3002<\/td><\/tr><tr><td><strong><code>ntp<\/code><\/strong><\/td><td>Ubuntu 20.04 \u4ee5\u964d\u3001\u6642\u523b\u540c\u671f\u306f\u6a19\u6e96\u306e <strong><code>systemd-timesyncd<\/code><\/strong> \u3084 <strong><code>chrony<\/code><\/strong> \u306b\u7f6e\u304d\u63db\u308f\u3063\u3066\u304a\u308a\u3001<code>ntp<\/code> \u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u975e\u63a8\u5968\u30fb\u672a\u66f4\u65b0\u3067\u3059\u3002<\/td><td><code>systemd-timesyncd<\/code> \u304c\u88cf\u3067\u52d5\u3044\u3066\u3044\u308b\u305f\u3081\u3001\u53e4\u3044 <code>ntp<\/code> \u306f\u4e0d\u8981\u3067\u3059\u3002<\/td><\/tr><tr><td><strong><code>crda<\/code><\/strong><\/td><td>\u7121\u7ddaLAN\uff08Wi-Fi\uff09\u306e\u898f\u5236\u9818\u57df\u30c7\u30fc\u30bf\u3092\u6271\u3046\u53e4\u3044\u30c4\u30fc\u30eb\u3067\u3059\u3002\u73fe\u5728\uff08Kernel 4.15\u4ee5\u964d\uff09\u306f Linux \u30ab\u30fc\u30cd\u30eb\u81ea\u4f53\u304c\u76f4\u63a5\u51e6\u7406\u3059\u308b\u305f\u3081\u4e0d\u8981\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/td><td>\u30af\u30e9\u30a6\u30c9\uff08ECS\uff09\u306e\u4eee\u60f3\u30de\u30b7\u30f3\u306b\u306fWi-Fi\u81ea\u4f53\u304c\u5b58\u5728\u3057\u306a\u3044\u305f\u3081\u5b8c\u5168\u306b\u4e0d\u8981\u3067\u3059\u3002<\/td><\/tr><tr><td><strong><code>libzip4<\/code><\/strong><\/td><td>C\u8a00\u8a9e\u7528\u306e\u53e4\u3044 zip \u51e6\u7406\u30e9\u30a4\u30d6\u30e9\u30ea\u3067\u3059\u3002Ubuntu 22.04 \u3067\u306f <strong><code>libzip4<\/code> (\u30d0\u30fc\u30b8\u30e7\u30f31.7.3\u4ee5\u964d)<\/strong> \u304c\u6a19\u6e96\u3067 <code>libssl3<\/code> \u3092\u4f7f\u3046\u3088\u3046\u306b\u5237\u65b0\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/td><td>\u65e7\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u6b8b\u9ab8\u3067\u3059\u3002\u3082\u3057WordPress\u7b49\u3067zip\u51e6\u7406\u304c\u5fc5\u8981\u306a\u5834\u5408\u3082\u3001\u6700\u65b0\u306e <code>libzip4<\/code> \u307e\u305f\u306f <code>php-zip<\/code> \u304c <code>libssl3<\/code> \u7d4c\u7531\u3067\u52d5\u4f5c\u3057\u307e\u3059\u3002<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">libssl1.1\u3092\u304d\u308c\u3044\u306b\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<div class=\"wp-block-sgb-codebox pre_tag\"><span><i class=\"fa fa-code\"><\/i>bash<\/span><pre><code>\u30d1\u30fc\u30b8\u3059\u308b\n# sudo apt purge libssl1.1\n\n\u78ba\u8a8d\u3059\u308b\n# apt-cache rdepends libssl1.1\n&lt;libssl1.1&gt;\n<\/code><\/pre><\/div>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u5f8c\u306b Alibaba Cloud  Security Center \u3067\u8106\u5f31\u6027\u304c\u89e3\u6d88\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u4f5c\u696d\u306f\u7d42\u4e86\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Verify\u3092\u5b9f\u884c\u3057\u30665\u5206\u307b\u3069\u5f85\u3064\u3068 Unhandled Vulnerabilities \u306f No Data \u3068\u306a\u308a\u307e\u3057\u305f\u3002\u3053\u308c\u3067OK\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-sango-with-big-shadow\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"525\" src=\"https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-57-1024x525.png\" alt=\"\" class=\"wp-image-19408\" srcset=\"https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-57-1024x525.png 1024w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-57-300x154.png 300w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-57-766x393.png 766w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-57-940x482.png 940w, https:\/\/www.bigriver.jp\/wp-content\/uploads\/2026\/10\/image-57.png 1090w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\"><\/figure>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u4ee5\u4e0a<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Alibaba Cloud Security Center \u304b\u3089 High Risk \u3068\u3057\u3066\u201dCVE-2022-1292:openssl openssl improper neutralization of specia &#8230; <\/p>\n","protected":false},"author":1,"featured_media":19410,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,26],"tags":[36],"class_list":["post-19404","post","type-post","status-publish","format-standard","has-post-thumbnail","category-alibaba-cloud","category-cloud-security-center","tag-securitycenter","entry"],"views":22,"_links":{"self":[{"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/posts\/19404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19404"}],"version-history":[{"count":7,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/posts\/19404\/revisions"}],"predecessor-version":[{"id":19420,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/posts\/19404\/revisions\/19420"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=\/wp\/v2\/media\/19410"}],"wp:attachment":[{"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bigriver.jp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}