The OpenSSL punycode vulnerability (CVE-2022-3602): Overview, detection, exploitation, and remediation

On November 1, 2022, the OpenSSL Project released a security advisory detailing a high-severity vulnerability in the OpenSSL library. Deployments of OpenSSL from 3.0.0 to 3.0.6 (included) are vulnerable and are fixed in version 3.0.7. The vulnerability is tracked as CVE-2022-3602.

In this blog post, we will provide:

• the main takeaways from Datadog Security Lab’s research into the vulnerability


• protection and detection recommendations


• our assessment of the vulnerability’s exploitability and impact as they relate to the scenarios necessary to reach …

cve cve-2022-3602 detection exploitation openssl punycode remediation vulnerability