NULL dereference in SSL_CIPHER_find() function on unknown cipher ID

🗓️ 27 Jan 2026 00:00:00Reported by OpenSSLType

NULL dereference in OpenSSL SSL_CIPHER_find() on unknown cipher ID in QUIC causing DoS.

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	21 May 202615:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image	17 Aug 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in openssl affects IBM Netezza Appliance	12 May 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple CVEs (CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796)	2 Mar 202611:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System	9 Jul 202610:04	–	ibm
FreeBSD	OpenSSL -- Multiple vulnerabilities	27 Jan 202600:00	–	freebsd
ATTACKERKB	CVE-2025-15468	27 Jan 202616:01	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1434)	19 Feb 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : openssl (ALSA-2026:1472)	28 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : openssl (ALSA-2026:1473)	2 Feb 202600:00	–	nessus