Excessive Memory Use Buffering DTLS Records for a Future Epoch

🗓️ 25 Aug 2026 00:00:00Reported by OpenSSLType

OpenSSL DTLS buffers full read buffer for future epoch records, enabling memory amplification DoS.

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026	19 Oct 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.	9 Oct 202611:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been found in IBM Guardium Data Protection	19 Oct 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL	29 Sep 202623:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	15 Oct 202613:24	–	ibm
FreeBSD	OpenSSL -- Multiple vulnerabilities	25 Aug 202600:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-2136)	14 Sep 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssl11 (ALAS-2026-3907)	14 Sep 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : edk2 (ALAS-2026-3908)	14 Sep 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssl (ALAS-2026-3919)	14 Sep 202600:00	–	nessus

Vulners

Node

openssl opensslRange4.0.0–4.0.2

openssl opensslRange3.6.0–3.6.4

openssl opensslRange3.5.0–3.5.8

openssl opensslRange3.4.0–3.4.7

openssl opensslRange3.0.0–3.0.22

openssl opensslRange1.1.1–1.1.1zi

openssl opensslRange1.0.2–1.0.2zr

25 Aug 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.00622

SSVC