openssl

欢迎来到 OpenSSL 项目 ============================== OpenSSL 是一个健壮、商业级、功能齐全的开源工具包，用于传输层安全协议（TLS，原 SSL）、数据报 TLS（DTLS）和 QUIC 协议。 协议实现基于一个全强度的通用加密库，该库也可以单独使用。还包括一个经认证符合 FIPS 标准的加密模块。 OpenSSL 源自 Eric A. Young 和 Tim J. Hudson 开发的 SSLeay 库。 OpenSSL 项目的官方主页是 www.openssl.org。 目录 概述 下载 构建与安装 文档 许可证 支持 贡献 法律事宜 概...

ssh3

!NOTE SSH3 可能会更改名称。它仍然是运行在 HTTP/3 扩展连接之上的 SSH 连接协议 RFC4254，但所需的更改非常重大，且与流行 SSH 实现的设计理念相距甚远，因此难以考虑集成。规范草案已经重命名为 "Remote Terminals over HTTP/3"，但我们需要一些时间来想出一个好听的永久名称。 SSH3: 使用 HTTP/3 实现更快、更丰富的安全 Shell SSH3 是对 SSH 协议的彻底重新审视，将其语义映射到 HTTP 机制之上。它源自我们的研究工作，我们（研究人员）最近将其作为 Internet-Draft...

CVE-2025-54939

PoC for QUIC-LEAK CVE-2025-54939 in LSQUIC Overview This PoC highlights CVE-2025-54939, a pre-handshake memory exhaustion Denial of Service vulnerability in the LSQUIC QUIC implementation. The issue, named QUIC-LEAK, was first documented by Imperva:...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – Amplificación del handshake QUIC mediante la omisión de la validación de dirección Código del programa simulación en Python root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check 扫描器 针对 NGINX HTTP/3（QUIC）释放后使用漏洞的非破坏性批量扫描器 在不触发漏洞的前提下，盘点你的哪些主机存在风险。 ⚠️ 免责声明 本工具仅用于授权的安全测试 ——测试你自己的基础设施，或你有明确书面授权进行评估的系统。它执行只读指纹识别 ，并不会 利用漏洞。你有责任确保测试在授权范围内，并遵守适用法律及负责任的披露原则。作者不对滥用行为承担任何责任。 🔍 关于漏洞 CVE-2026-42530 是 NGINX 的 ngxhttpv3module 中存在的释放后使用漏洞（CWE-416）。当 NGINX 配置为提供...

RockyLinux 10 : openssl (RLSA-2026:67154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67154 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when...

openssl: QUIC ACK-only packet retention can cause memory exhaustion

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

USN-8678-3: OpenSSL vulnerability

USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...

CVE-2026-78966

A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...

openssl: QUIC ACK-only packet retention can cause memory exhaustion

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

CVE-2026-63075

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

PT-2026-81524

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the QUIC protocol, which is a transport layer network protocol designed to reduce connection latency. A remote attacker can leak sensitive information by...

OpenSSL -- Multiple vulnerabilities

The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...

CVE-2026-63075

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...

Astra Linux – Vulnerability in Chromium

The use of “after free” in QUIC in Google Chrome before version 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox

Data was not properly sanitized during the decoding of a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox versions earlier than 124...

CVE-2026-25800

A flaw was found in Quinn, a Rust implementation of the QUIC transport protocol. A remote attacker can exploit this vulnerability by sending specially crafted QUIC stream fragments with many gaps. This can lead to high buffer overhead in the Assembler component, causing memory exhaustion and a...

CVE-2026-17673

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17733

Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...