JLSEC-2026-241 Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary:...

🗓️ 27 Apr 2026 18:33:55Reported by GoogleType

osv

osv🔗 osv.dev

Long DH checks may cause denial of service by DH_check, DH_check_ex, or EVP_PKEY_param_check.

Reporter	Title	Published	Views	Family All 477
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-yaml, OpenSSL, GnuTLS , OpenTelemetry-Go, go-toolset and urllib3	30 Jan 202408:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	17 Jan 202415:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in FOS firmware used by IBM b-type SAN directors and switches.	1 May 202420:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Open Source affect Cloud Pak System	28 Oct 202417:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management is vulnerable to a denial of service from a flaw in DH keys or parameters in OpenSSL (CVE-2023-3817)	25 Oct 202420:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	14 Mar 202405:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Base OS issues	15 Apr 202503:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase	13 Mar 202414:30	–	ibm

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Jul/43
openwall	www.openwall.com/lists/oss-security/2023/07/31/1
openwall	www.openwall.com/lists/oss-security/2023/09/22/11
openwall	www.openwall.com/lists/oss-security/2023/09/22/9
openwall	www.openwall.com/lists/oss-security/2023/11/06/2
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
github	www.github.com/advisories/GHSA-c945-cqj5-wfv6

27 Apr 2026 19:02Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.3

EPSS0.00351

diffie hellman checks diffie hellman parameters denial of service evp key check