Lucene search
+L

Untrusted Sender DN Used as Format String in CMP Response Validation

🗓️ 25 Aug 2026 00:00:00Reported by OpenSSLType 
openssl
 openssl
🔗 openssl-library.org👁 28 Views

Format string in OpenSSL CMP response validation via untrusted sender DN causes client crash.

Related
Detection
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026
19 Oct 202616:40
–ibm
ibm
IBM Security Bulletins
Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.
9 Oct 202611:54
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
15 Oct 202613:24
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL
28 Oct 202620:56
–ibm
freebsd
FreeBSD
OpenSSL -- Multiple vulnerabilities
25 Aug 202600:00
–freebsd
nessus
Tenable Nessus
Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-2136)
14 Sep 202600:00
–nessus
nessus
Tenable Nessus
AlmaLinux 10 : openssl (ALSA-2026:67154)
15 Sep 202600:00
–nessus
nessus
Tenable Nessus
AlmaLinux 9 : openssl (ALSA-2026:67165)
15 Sep 202600:00
–nessus
nessus
Tenable Nessus
Rocky Linux 10.2 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2026_67154)
1 Oct 202600:00
–nessus
nessus
Tenable Nessus
Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2026_67165)
1 Oct 202600:00
–nessus
Rows per page
Vulners
Node
OR
opensslopensslRange4.0.0–4.0.2
opensslopensslRange3.6.0–3.6.4
opensslopensslRange3.5.0–3.5.8
opensslopensslRange3.4.0–3.4.7

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2026 00:00Current
7High risk
Vulners AI Score7
CVSS 3.19.8
EPSS0.01159
SSVC
28