AlmaLinux 9.6 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (ALMALINUX9.6:CLSA-2026:1779203444)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779203444 advisory. - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow...

CentOS Linux 7 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils Multiple Vulnerabilities (CENTOS7:CLSA-2026:1780925342)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1780925342 advisory. - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in...

OpenSSL 3.0.0 < 3.0.23 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.23. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.23 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way throug...

OpenSSL 3.5.0 < 3.5.9 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.5.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.5.9 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through...

OpenSSL 3.4.0 < 3.4.8 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.8 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through...

Rocky Linux 9.6 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (ALMALINUX9.6:CLSA-2026:1779203444)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779203444 advisory. - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1788264701)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1788264701 advisory. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memor...

OpenSSL 4.0.0 < 4.0.3 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 4.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 4.0.3 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through...

CentOS Linux 8.4 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1780069034)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1780069034 advisory. - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in...

CentOS Linux 6 [TuxCare] Security Update: openssl / openssl-devel / openssl-perl / openssl-static (CENTOS6:CLSA-2026:1788263953)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1788263953 advisory. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the...

OpenSSL 1.1.1 < 1.1.1zj Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1zj. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1zj advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way...

OpenSSL 1.0.2 < 1.0.2zs Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2zs. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2zs advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way...

OpenSSL 3.6.0 < 3.6.5 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.6.5 advisory. - Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through...

USN-8847-2 openssl, openssl1.0 vulnerabilities

USN-8847-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding fix for OpenSSL on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSL incorrectly handled certain certificate revocation list...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL

Summary IBM i is vulnerable to multiple vulnerabilites CVE-2026-54874, CVE-2026-63072, CVE-2026-63074, CVE-2026-63076, CVE-2026-75803 in OpenSSL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-54874 DESCRIPTION: Issue summary: Receiving a DTLS record for a...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Generador de artefactos de detección para Citrix NetScaler CVE-2026-88772 Consulta nuestra publicación en el blog para obtener detalles técnicos. Detección en acción / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / //...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

CVE-2026-102719

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-102712

On the first DTLS ClientHello, the parser copies a device-claimed sessionid length and validates the ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim in...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...