dtls-fuzzer

dtls-fuzzer is a Java tool which performs protocol state fuzzing of DTLS servers. More concretely, it supports the following functionality: 1. given an alphabet, it can automatically generate a model of a local DTLS server implementation; 2. given a test sequence of inputs and an alphabet, it can...

Security Bulletin: vulnerabilities in openssl and libcurl library

Summary Security Bulletin: vulnerabilities in openssl and libcurl library Vulnerability Details CVEID:CVE-2026-54874 DESCRIPTION: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires...

tinydtls

CONTENTS This library contains functions and structures that can help constructing a single-threaded UDP server with DTLS support in C99. The following components are available: dtls Basic support for DTLS with pre-shared key mode. tests The subdirectory tests contains test programs that show how...

Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-54874: Excessive Memory Use Buffering DTLS Records...

SUSE-SU-2026:5209-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-54874: Excessive Memory Use Buffering DTLS...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1282798. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:5208-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1282798...

SUSE-SU-2026:5207-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1282798...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1282798. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:5206-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD...

SUSE-SU-2026:5205-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2...

SUSE-SU-2026:5198-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1282798...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1282798. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD...

SUSE-SU-2026:5197-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD...

SUSE-SU-2026:5196-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2...

openssl: OpenSSL: Denial of Service via undersized DTLS record

A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service DoS by terminating an active Datagram Transport Layer Security DTLS session. By sending an undersized network packet that is shorter than the expected cryptographic overhead, the record processing layer...