CVE-2026-35191

A flaw in the OpenSSL QUIC server allows a remote attacker to trigger a Denial of Service (DoS) attack via network traffic amplification. When client address validation is disabled, the QUIC stack incorrectly accounts for unvalidated credit by adding the entire datagram length for every packet co...

CVE-2026-35191 QUIC Unvalidated Amplification Credit may be Over Accounted

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

EUVD-2026-89002

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

EUVD-2026-89001

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189 Excessive Memory Allocation in Relative CRLDP Processing

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189

A vulnerability exists in OpenSSL where a certificate containing numerous nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth during a TLS handshake. When OpenSSL caches these X.509 extensions, it can allocate hundreds of MiB of resident memory from a certificate u...

CVE-2026-35189 Excessive Memory Allocation in Relative CRLDP Processing

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189 Excessive Memory Allocation in Relative CRLDP Processing

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

ROOT-OS-ALPINE-323-CVE-2026-22796 CVE-2026-22796 in openssl - Patched by Root

Root has patched CVE-2026-22796 in the openssl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-324-CVE-2026-7383 CVE-2026-7383 in openssl - Patched by Root

Root has patched CVE-2026-7383 in the openssl package for Root:Alpine:3.24. Multiple fixed versions available...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

ROOT-OS-ALPINE-318-CVE-2024-12797 CVE-2024-12797 in openssl - Patched by Root

Root has patched CVE-2024-12797 in the openssl package for Root:Alpine:3.18. Multiple fixed versions available...

OpenSSL Security Advisory 20260929

OpenSSL Security Advisory 20260929 - The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs t...

PT-2026-102647

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description Processing a certificate containing numerous nameRelativeToCRLIssuer CRL distribution points can cause disproportionate heap growth when X.509 extensions are cached. A malicious peer can send...

PT-2026-102652

Name of the Vulnerable Software and Affected Versions OpenSSL versions 4.0 through 4.0.2 OpenSSL versions 3.6 through 3.6.4 OpenSSL versions 3.5 through 3.5.8 OpenSSL versions 3.4 through 3.4.7 Description On ARM64 and RISC-V platforms, the SM2 curve utilizes a scalar multiplication implementatio...

PT-2026-102654

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The QUIC stack fails to enforce connection-level flow control for streams, although it correctly enforces stream-level limits. A remote peer can bypass the intended connection flow control...

Linux Distros Unpatched Vulnerability : CVE-2026-35189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions...

Linux Distros Unpatched Vulnerability : CVE-2026-75805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when...