ROOT-OS-DEBIAN-12-CVE-2026-14456 CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-54874 CVE-2026-54874 in openssl - Patched by Root

Root has patched CVE-2026-54874 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63072 CVE-2026-63072 in openssl - Patched by Root

Root has patched CVE-2026-63072 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root

Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63076 CVE-2026-63076 in openssl - Patched by Root

Root has patched CVE-2026-63076 in the openssl package for Root:Debian:12. Multiple fixed versions available...

Exploit for CVE-2026-105221

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-105794: Improper Certificate Validation

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-pat...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : EDK II vulnerabilities (USN-8865-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8865-1 advisory. It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL...

ALSA-2026:76918 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 For...

PT-2026-106751

Name of the Vulnerable Software and Affected Versions MsQuic versions prior to 2.4.20 MsQuic versions prior to 2.5.11 MsQuic versions prior to 2.6.1 Description MsQuic clients using the OpenSSL or QuicTLS TLS backends fail to properly verify that a server certificate matches the intended target...

spookyssl-pcaps

PCAP SpookySSL e Copertura di Rete PCAP o non è successo A seguito della vulnerabilità recentemente divulgata in OpenSSL v3.0 fino alla v3.0.6 CVE-2022-3602, abbiamo esaminato come appare un tentativo di sfruttamento 'sulla rete'. Questo repository contiene PCAP di vari scenari di sfruttamento,...

CLSA-2026-1791229846 Fix CVE(s): CVE-2026-35189, CVE-2026-84782

SECURITY UPDATE: excessive memory use with relative CRL distribution point names - debian/patches/CVE-2026-35189.patch: build the full name of a nameRelativeToCRLIssuer distribution point only while matching a CRL instead of for every parsed certificate in crypto/x509v3/v3purp.c and...

CLSA-2026-1791229632 Fix CVE(s): CVE-2026-35189, CVE-2026-84782

SECURITY UPDATE: excessive memory use with relative CRL distribution point names - debian/patches/CVE-2026-35189.patch: build the full name of a nameRelativeToCRLIssuer distribution point only while matching a CRL instead of for every parsed certificate in crypto/x509v3/v3crld.c,...

CLSA-2026-1791200195 openssl: Fix of 2 CVEs

CVE-2026-84782: reset s-initoff to 0 in dtls1retransmitmessage so a DTLS retransmission is read from the start of the queued message instead of the offset left by a write suspended on WANTWRITE, and skip retransmission in dtls1handletimeout while such a write is still parked - CVE-2026-35189:...

CLSA-2026-1791200035 openssl: Fix of 2 CVEs

CVE-2026-84782: reset s-initoff to 0 in dtls1retransmitmessage so a DTLS retransmission is read from the start of the queued message instead of the offset left by a write suspended on WANTWRITE, and skip retransmission in dtls1handletimeout while such a write is still parked - CVE-2026-35189:...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

[SECURITY] Fedora 45 Update: openssl-4.0.3-1.fc45

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

OpenSSL Buffer Overflow

The vulnerability of the buffers in CipherCtxRef::cipherupdate, CipherCtxRef::cipherupdatevec, and symm::Crypter::update functions in the OpenSSL library for the Rust programming language is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow an attacker t...

Fedora 45 : openssl (2026-06c29a2cb4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-06c29a2cb4 advisory. Rebase to OpenSSL 4.0.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...