openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

🗓️ 19 Oct 2026 05:56:51Reported by RedHatType

redhat🔗 access.redhat.com👁 3 Views

Remote DoS in OpenSSL via NULL pointer dereference in CMS EnvelopedData processing.

Reporter	Title	Published	Views	Family All 392
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	29 Jul 202608:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerable Version of Software in Use	6 Jul 202622:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	24 Aug 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	14 Sep 202620:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	1 Jul 202622:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	2 Jul 202610:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.	21 Oct 202613:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By NULL Pointer Dereference, Use Afer Free, and Out-of-Bounds Write Vulnerabilities in OpenSSL [CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-28387, CVE-2026-31789]	8 Jun 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	23 Jun 202603:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL	4 May 202622:03	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9.4	aarch64	openssl	1:3.0.7-29.el9_4.3	openssl-1:3.0.7-29.el9_4.3.aarch64.rpm
Red Hat Enterprise Linux	9.4	ppc64le	openssl	1:3.0.7-29.el9_4.3	openssl-1:3.0.7-29.el9_4.3.ppc64le.rpm
Red Hat Enterprise Linux	9.4	s390x	openssl	1:3.0.7-29.el9_4.3	openssl-1:3.0.7-29.el9_4.3.s390x.rpm
Red Hat Enterprise Linux	9.4	x86_64	openssl	1:3.0.7-29.el9_4.3	openssl-1:3.0.7-29.el9_4.3.x86_64.rpm
Red Hat Enterprise Linux	9.4	aarch64	openssl-debuginfo	1:3.0.7-29.el9_4.3	openssl-debuginfo-1:3.0.7-29.el9_4.3.aarch64.rpm
Red Hat Enterprise Linux	9.4	i686	openssl-debuginfo	1:3.0.7-29.el9_4.3	openssl-debuginfo-1:3.0.7-29.el9_4.3.i686.rpm
Red Hat Enterprise Linux	9.4	ppc64le	openssl-debuginfo	1:3.0.7-29.el9_4.3	openssl-debuginfo-1:3.0.7-29.el9_4.3.ppc64le.rpm
Red Hat Enterprise Linux	9.4	s390x	openssl-debuginfo	1:3.0.7-29.el9_4.3	openssl-debuginfo-1:3.0.7-29.el9_4.3.s390x.rpm
Red Hat Enterprise Linux	9.4	x86_64	openssl-debuginfo	1:3.0.7-29.el9_4.3	openssl-debuginfo-1:3.0.7-29.el9_4.3.x86_64.rpm
Red Hat Enterprise Linux	9.4	aarch64	openssl-debugsource	1:3.0.7-29.el9_4.3	openssl-debugsource-1:3.0.7-29.el9_4.3.aarch64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-28390
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc
github	www.github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6
github	www.github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4
github	www.github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788
github	www.github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-28390
openssl-library	www.openssl-library.org/news/secadv/20260407.txt
cve	www.cve.org/CVERecord

22 Oct 2026 06:01Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.00805

SSVC

OpenSSL Denial of Service NULL pointer dereference CMS EnvelopedData RSA-OAEP unix