cve/2022/CVE-2022-0517.md

### [CVE-2022-0517](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0517)
![](https://img.shields.io/static/v1?label=Product&message=Mozilla%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202.7.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Local%20privilege%20escalation%20vis%20uncontrolled%20OpenSSL%20search%20path&color=brighgreen)

### Description

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/chnzzh/OpenSSL-CVE-lib
- https://github.com/dlehgus1023/dlehgus1023
- https://github.com/l33d0hyun/l33d0hyun