Critical Vulnerability in OpenSSL!

This report describes two high-severity buffer-overflow vulnerabilities in OpenSSL 3.0.x (CVE-2022-3786 and CVE-2022-3602) affecting X.509 certificate verification that could enable denial-of-service or remote code execution; it recommends upgrading to OpenSSL 3.0.7 and includes internet-wide telemetry showing ~7,062 hosts advertising OpenSSL >=3.0.0, country distributions, and methods for identifying affected hosts.