AZL-89796 CVE-2026-34180 affecting package openssl-fips-provider 3.1.2-2

🗓️ 09 Jun 2026 17:17:04Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Heap buffer over-read in openssl-fips-provider 3.1.2-2 via ASN.1 decoder truncation.

Reporter	Title	Published	Views	Family All 202
FreeBSD	OpenSSL -- Multiple vulnerabilities	9 Jun 202600:00	–	freebsd
FreeBSD	FreeBSD -- Multiple vulnerabilities in OpenSSL	9 Jun 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple critical vulnerabilities in OpenSSL, Java SE, and Jetty	11 Aug 202609:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	24 Aug 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL	14 Jul 202622:25	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	6 Jul 202615:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL	22 Jul 202608:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	8 Jul 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	1 Jul 202622:38	–	ibm
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1853)	22 Jun 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34180

29 Aug 2026 05:25Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.01025

SSVC

openssl-fips-provider heap buffer over-read ASN.1 decoder integer truncation denial of service d2i decoding