83775 matches found
DEBIAN-CVE-2026-63076
Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...
DEBIAN-CVE-2026-63073
Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...
DEBIAN-CVE-2026-63075
Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC...
DEBIAN-CVE-2026-63074
Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...
DEBIAN-CVE-2026-63072
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...
DEBIAN-CVE-2026-54874
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...
DEBIAN-CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...
DEBIAN-CVE-2026-18798
Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence...
ROOT-OS-DEBIAN-12-CVE-2026-6772 CVE-2026-6772 in nss - Patched by Root
Root has patched CVE-2026-6772 in the nss package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-7531 CVE-2024-7531 in nss - Patched by Root
Root has patched CVE-2024-7531 in the nss package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-6767 CVE-2026-6767 in nss - Patched by Root
Root has patched CVE-2026-6767 in the nss package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-6766 CVE-2026-6766 in nss - Patched by Root
Root has patched CVE-2026-6766 in the nss package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-5388 CVE-2023-5388 in nss - Patched by Root
Root has patched CVE-2023-5388 in the nss package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root
Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-59996 CVE-2026-59996 in openssh - Patched by Root
Root has patched CVE-2026-59996 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-60002 CVE-2026-60002 in openssh - Patched by Root
Root has patched CVE-2026-60002 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-59995 CVE-2026-59995 in openssh - Patched by Root
Root has patched CVE-2026-59995 in the openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-60001 CVE-2026-60001 in openssh - Patched by Root
Root has patched CVE-2026-60001 in the openssh package for Root:Debian:12. Multiple fixed versions available...