deluded-openssl-3.2.0

Welcome to the OpenSSL Project !openssl logo !github actions ci badgegithub actions ci !appveyor badgeappveyor jobs OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the TLS formerly SSL, DTLS and QUIC currently client side only protocols. The protocol implementations a...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Detection Artifact Generator for Citrix NetScaler CVE-2026-88772 See our blog post for technical details. Detection in Action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

dtls-fuzzer

dtls-fuzzer is a Java tool which performs protocol state fuzzing of DTLS servers. More concretely, it supports the following functionality: 1. given an alphabet, it can automatically generate a model of a local DTLS server implementation; 2. given a test sequence of inputs and an alphabet, it can...

tinydtls

CONTENTS This library contains functions and structures that can help constructing a single-threaded UDP server with DTLS support in C99. The following components are available: dtls Basic support for DTLS with pre-shared key mode. tests The subdirectory tests contains test programs that show how...

CLEANSTART-2026-VF53508 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through

CVE-2026-84782 affects multiple packages. Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. See references for individual vulnerability details...

CLEANSTART-2026-KP41215 Issue summary: An established DTLS 1

CVE-2026-75806 affects multiple packages. Issue summary: An established DTLS 1. See references for individual vulnerability details...

CLEANSTART-2026-QG73880 Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires

CVE-2026-54874 affects multiple packages. Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. See references for individual vulnerability details...

Oracle Linux 10 : openssl (ELSA-2026-500441)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500441 advisory. - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264466 - Patch asn1d2ireadbio to read headers without...

OpenSSL_DTLS_CVE_2014_0221

OpenSSLDTLSCVE20140221 OpenSSL DTLS CVE-2014-0221 Remote Denial What is DTLS Datagram Transport Layer Security? Datagram Transport Layer Security. Physical layer TCP layer datagram support: TLS UDP layer datagram support: DTLS: Through appropriate modifications of the Handshake process, it handle...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Securit...

CVE-2026-93475

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

CVE-2026-93475 Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

EUVD-2026-105129

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the NXCRYPTOMAXRSAMODULUSSIZE default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-scope...

CVE-2026-93475

The NetX Secure X.509 parser is vulnerable to an out-of-bounds write because it accepts RSA public keys of any size but decrypts them into fixed-size buffers sized for a default of 4096 bits. An attacker can provide a certificate with a larger modulus, causing the write to occur past a file-scope...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...

Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: Security fixes in August 2026 release bsc1274774 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4762-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in August 2026 release bsc1274774...

CVE-2026-20127

CVE-2026-20127 Overview An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127. This exploit targets the vbondprocchallengeackack handler. It sends a forged CHALLENGEACKACK message msgtype=10 with an attacker-controlled verifystatus=1 byte, directl...