Vulnerability-Lookup

SUSE-SU-2026:23512-1

Vulnerability from csaf_suse - Published: 2026-09-02 09:10 - Updated: 2026-09-16 09:03

Summary

Security update for openssl-3

Severity

Important

Notes

Title of the patch: Security update for openssl-3

Description of the patch: This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837). - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). - CVE-2026-63074: unbounded growth of `extraCerts` cache in the CMP server (bsc#1274797). - CVE-2026-63076: invalid pointer dereference in the CMP server via crafted `protectionAlg` (bsc#1274790).

Patchnames: SUSE-SLE-Micro-6.1-701

CVE-2026-54874

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-63072

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 16 products, the same list as for CVE-2026-54874

Threats

Impact important

CVE-2026-63074

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 16 products, the same list as for CVE-2026-54874

Threats

Impact moderate

CVE-2026-63076

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 16 products, the same list as for CVE-2026-54874

Threats

Impact important

CVE-2026-75803

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 16 products, the same list as for CVE-2026-54874

Threats

Impact moderate

References

27 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1274774	self
https://bugzilla.suse.com/1274788	self
https://bugzilla.suse.com/1274790	self
https://bugzilla.suse.com/1274795	self
https://bugzilla.suse.com/1274797	self
https://bugzilla.suse.com/1275837	self
https://www.suse.com/security/cve/CVE-2026-54874/	self
https://www.suse.com/security/cve/CVE-2026-63072/	self
https://www.suse.com/security/cve/CVE-2026-63074/	self
https://www.suse.com/security/cve/CVE-2026-63076/	self
https://www.suse.com/security/cve/CVE-2026-75803/	self
https://www.suse.com/security/cve/CVE-2026-54874	external
https://bugzilla.suse.com/1274795	external
https://www.suse.com/security/cve/CVE-2026-63072	external
https://bugzilla.suse.com/1274788	external
https://bugzilla.suse.com/1275133	external
https://www.suse.com/security/cve/CVE-2026-63074	external
https://bugzilla.suse.com/1274797	external
https://www.suse.com/security/cve/CVE-2026-63076	external
https://bugzilla.suse.com/1274790	external
https://bugzilla.suse.com/1275143	external
https://www.suse.com/security/cve/CVE-2026-75803	external
https://bugzilla.suse.com/1275837	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl-3",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl-3 fixes the following issues:\n  \nAugust 2026 release.\n\n- CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837).\n- CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch (bsc#1274795).\n- CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).\n- CVE-2026-63074: unbounded growth of `extraCerts` cache in the CMP server (bsc#1274797).\n- CVE-2026-63076: invalid pointer dereference in the CMP server via crafted `protectionAlg` (bsc#1274790).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-701",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23512-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:23512-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623512-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:23512-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-September/029038.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274774",
        "url": "https://bugzilla.suse.com/1274774"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274788",
        "url": "https://bugzilla.suse.com/1274788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274790",
        "url": "https://bugzilla.suse.com/1274790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274795",
        "url": "https://bugzilla.suse.com/1274795"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274797",
        "url": "https://bugzilla.suse.com/1274797"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275837",
        "url": "https://bugzilla.suse.com/1275837"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54874 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54874/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63072 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63072/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63074 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63074/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63076 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63076/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-75803 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-75803/"
      }
    ],
    "title": "Security update for openssl-3",
    "tracking": {
      "current_release_date": "2026-09-16T09:03:54Z",
      "generator": {
        "date": "2026-09-02T09:10:40Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:23512-1",
      "initial_release_date": "2026-09-02T09:10:40Z",
      "revision_history": [
        {
          "date": "2026-09-02T09:10:40Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T09:03:54Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
                "product": {
                  "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
                  "product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
                "product": {
                  "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
                  "product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
                "product": {
                  "name": "libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
                  "product_id": "libopenssl3-3.1.4-slfo.1.1_13.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
                "product": {
                  "name": "openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
                  "product_id": "openssl-3-3.1.4-slfo.1.1_13.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
                "product": {
                  "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
                  "product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
                "product": {
                  "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
                  "product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
                "product": {
                  "name": "libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
                  "product_id": "libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
                "product": {
                  "name": "openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
                  "product_id": "openssl-3-3.1.4-slfo.1.1_13.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
                "product": {
                  "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
                  "product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
                "product": {
                  "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
                  "product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
                "product": {
                  "name": "libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
                  "product_id": "libopenssl3-3.1.4-slfo.1.1_13.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-3-3.1.4-slfo.1.1_13.1.s390x",
                "product": {
                  "name": "openssl-3-3.1.4-slfo.1.1_13.1.s390x",
                  "product_id": "openssl-3-3.1.4-slfo.1.1_13.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
                "product": {
                  "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
                  "product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
                "product": {
                  "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
                  "product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
                "product": {
                  "name": "libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
                  "product_id": "libopenssl3-3.1.4-slfo.1.1_13.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-3-3.1.4-slfo.1.1_13.1.x86_64",
                "product": {
                  "name": "openssl-3-3.1.4-slfo.1.1_13.1.x86_64",
                  "product_id": "openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64"
        },
        "product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le"
        },
        "product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x"
        },
        "product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64"
        },
        "product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64"
        },
        "product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le"
        },
        "product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x"
        },
        "product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64"
        },
        "product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl3-3.1.4-slfo.1.1_13.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64"
        },
        "product_reference": "libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le"
        },
        "product_reference": "libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl3-3.1.4-slfo.1.1_13.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x"
        },
        "product_reference": "libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl3-3.1.4-slfo.1.1_13.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64"
        },
        "product_reference": "libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-3-3.1.4-slfo.1.1_13.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64"
        },
        "product_reference": "openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-3-3.1.4-slfo.1.1_13.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le"
        },
        "product_reference": "openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-3-3.1.4-slfo.1.1_13.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x"
        },
        "product_reference": "openssl-3-3.1.4-slfo.1.1_13.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-3-3.1.4-slfo.1.1_13.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
        },
        "product_reference": "openssl-3-3.1.4-slfo.1.1_13.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-54874",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54874"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54874",
          "url": "https://www.suse.com/security/cve/CVE-2026-54874"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274795 for CVE-2026-54874",
          "url": "https://bugzilla.suse.com/1274795"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T09:10:40Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-54874"
    },
    {
      "cve": "CVE-2026-63072",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63072"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient\u0027s private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63072",
          "url": "https://www.suse.com/security/cve/CVE-2026-63072"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274788 for CVE-2026-63072",
          "url": "https://bugzilla.suse.com/1274788"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275133 for CVE-2026-63072",
          "url": "https://bugzilla.suse.com/1275133"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T09:10:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-63072"
    },
    {
      "cve": "CVE-2026-63074",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63074"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\nadditional certificates (extraCerts) sent in a CMP message, but never expunges\nthem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\nfrequently, this cache of extraCerts may grow unboundedly, and a malicious\nclient may flood a CMP server with requests driving this growth.\n\nImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\nfor the lifetime of a server process may observe unbounded memory growth in the\nevent a malicious client repeatedly sends requests containing unique extra\ncertificates, which may lead to OOM conditions.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: If a remote user sends CMP messages to a server with a list of\nextraCerts and the message is rejected, the extraCerts from the message remains\nin the server contexts untrusted certificate stack.  This exposes servers with\nlong lived ctx objects to Denial of Service attacks in which an attacker sends\nmessages intending to be rejected with a large list of additional certificates\nrepeatedly, forcing the server to store them indefinitely.\n   \nThe issue was fixed by removing the added extra certs if the message is\nrejected, using the same method as when the context is configured to not do\ncaching at all.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63074",
          "url": "https://www.suse.com/security/cve/CVE-2026-63074"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274797 for CVE-2026-63074",
          "url": "https://bugzilla.suse.com/1274797"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T09:10:40Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-63074"
    },
    {
      "cve": "CVE-2026-63076",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63076"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63076",
          "url": "https://www.suse.com/security/cve/CVE-2026-63076"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274790 for CVE-2026-63076",
          "url": "https://bugzilla.suse.com/1274790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275143 for CVE-2026-63076",
          "url": "https://bugzilla.suse.com/1275143"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T09:10:40Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-63076"
    },
    {
      "cve": "CVE-2026-75803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-75803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
          "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-75803",
          "url": "https://www.suse.com/security/cve/CVE-2026-75803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275837 for CVE-2026-75803",
          "url": "https://bugzilla.suse.com/1275837"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_13.1.x86_64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.aarch64",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.ppc64le",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.s390x",
            "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T09:10:40Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-75803"
    }
  ]
}

CVE-2026-54874 (GCVE-0-2026-54874)

Vulnerability from cvelistv5 – Published: 2026-08-25 12:59 – Updated: 2026-08-25 14:28

Title

Excessive Memory Use Buffering DTLS Records for a Future Epoch

Summary

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amount of memory, which may lead to a Denial of Service. CWE: CWE-405: Asymmetric Resource Consumption (Amplification) Description: While a DTLS handshake is in progress, a peer may legitimately have already moved on to the next epoch (for example, having sent its ChangeCipherSpec and Finished messages) before the local endpoint has processed the same transition, typically because of reordering on the underlying UDP transport. OpenSSL buffers such early records so that they can be processed once the local endpoint catches up. Buffering a record currently retains the entire read buffer it arrived in, which is sized to hold the largest possible DTLS record (around 16 kilobytes), rather than just the bytes that make up the record itself. Up to 100 such records may be buffered per connection. As a result, a peer that sends a stream of small forged records claiming to belong to the next epoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of memory, despite sending only a small fraction of that amount of data over the network. An attacker therefore gains a memory amplification factor of around 1200, and can multiply the effect across as many associations as it is able to open, making this a remote memory exhaustion Denial of Service risk for DTLS servers. Since the memory retained per connection remains bounded, and any limit an application already places on the number of concurrent associations also bounds the total exposure, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. OpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.2. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.4. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.8. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.7. OpenSSL 3.0 users should upgrade to OpenSSL 3.0.22. Premium support customers only: OpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi OpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr This issue was reported on 18 May 2026 by Amazon Web Services. The fix has been developed by Matt Caswell. -- cut (non-publishing metadata for internal use) -- Reported by: Amazon Web Services Fixed by: Matt Caswell

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 14:28 UTC

CWE

CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

openssl mitre root

References

6 references

URL	Tags
https://openssl-library.org/news/secadv/20260825.txt	vendor-advisory
https://github.com/openssl/openssl/commit/cc0c671…	patch
https://github.com/openssl/openssl/commit/f52ffc1…	patch
https://github.com/openssl/openssl/commit/4808b5d…	patch
https://github.com/openssl/openssl/commit/7110cb2…	patch
https://github.com/openssl/openssl/commit/a0c8ec5…	patch

Impacted products

1 product

Vendor	Product	Version
OpenSSL	OpenSSL	Affected: 4.0.0 , < 4.0.2 (semver) Affected: 3.6.0 , < 3.6.4 (semver) Affected: 3.5.0 , < 3.5.8 (semver) Affected: 3.4.0 , < 3.4.7 (semver) Affected: 3.0.0 , < 3.0.22 (semver) Affected: 1.1.1 , < 1.1.1zi (custom) Affected: 1.0.2 , < 1.0.2zr (custom)

Date Public

2026-08-25 11:36

Credits

Amazon Web Services Matt Caswell

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-54874",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T14:28:32.620361Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T14:28:37.339Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "4.0.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.8",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.7",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.22",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.1zi",
              "status": "affected",
              "version": "1.1.1",
              "versionType": "custom"
            },
            {
              "lessThan": "1.0.2zr",
              "status": "affected",
              "version": "1.0.2",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Amazon Web Services"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Matt Caswell"
        }
      ],
      "datePublic": "2026-08-25T11:36:16.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: Receiving a DTLS record for a future epoch while a handshake\u003cbr\u003eis in progress causes OpenSSL to buffer far more memory than the record\u003cbr\u003eitself requires.\u003cbr\u003e\u003cbr\u003eImpact summary: A peer can use a small amount of network traffic to make an\u003cbr\u003eOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\u003cbr\u003ewhich may lead to a Denial of Service.\u003cbr\u003e\u003cbr\u003eCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\u003cbr\u003e\u003cbr\u003eDescription: While a DTLS handshake is in progress, a peer may legitimately\u003cbr\u003ehave already moved on to the next epoch (for example, having sent its\u003cbr\u003eChangeCipherSpec and Finished messages) before the local endpoint has\u003cbr\u003eprocessed the same transition, typically because of reordering on the\u003cbr\u003eunderlying UDP transport. OpenSSL buffers such early records so that they\u003cbr\u003ecan be processed once the local endpoint catches up.\u003cbr\u003e\u003cbr\u003eBuffering a record currently retains the entire read buffer it arrived in,\u003cbr\u003ewhich is sized to hold the largest possible DTLS record (around 16\u003cbr\u003ekilobytes), rather than just the bytes that make up the record itself. Up\u003cbr\u003eto 100 such records may be buffered per connection. As a result, a peer\u003cbr\u003ethat sends a stream of small forged records claiming to belong to the next\u003cbr\u003eepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\u003cbr\u003ememory, despite sending only a small fraction of that amount of data over\u003cbr\u003ethe network.\u003cbr\u003e\u003cbr\u003eAn attacker therefore gains a memory amplification factor of around 1200,\u003cbr\u003eand can multiply the effect across as many associations as it is able to\u003cbr\u003eopen, making this a remote memory exhaustion Denial of Service risk for\u003cbr\u003eDTLS servers. Since the memory retained per connection remains bounded,\u003cbr\u003eand any limit an application already places on the number of concurrent\u003cbr\u003eassociations also bounds the total exposure, this issue has been assessed\u003cbr\u003eas Low severity.\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003e\u003cbr\u003eNo FIPS modules are affected by this issue as the affected code is outside\u003cbr\u003ethe OpenSSL FIPS module boundary.\u003cbr\u003e\u003cbr\u003eOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\u003cbr\u003eissue.\u003cbr\u003e\u003cbr\u003eOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\u003cbr\u003eOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\u003cbr\u003eOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\u003cbr\u003eOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\u003cbr\u003eOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\u003cbr\u003e\u003cbr\u003ePremium support customers only:\u003cbr\u003eOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\u003cbr\u003eOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\u003cbr\u003e\u003cbr\u003eThis issue was reported on 18 May 2026 by Amazon Web Services.\u003cbr\u003eThe fix has been developed by Matt Caswell.\u003cbr\u003e\u003cbr\u003e-- cut (non-publishing metadata for internal use) --\u003cbr\u003eReported by: Amazon Web Services\u003cbr\u003eFixed by: Matt Caswell"
            }
          ],
          "value": "Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Low"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-405",
              "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T12:59:17.912Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        },
        {
          "name": "4.0.2 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107"
        },
        {
          "name": "3.6.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c"
        },
        {
          "name": "3.5.8 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23"
        },
        {
          "name": "3.4.7 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40"
        },
        {
          "name": "3.0.22 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Excessive Memory Use Buffering DTLS Records for a Future Epoch",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2026-54874",
    "datePublished": "2026-08-25T12:59:17.912Z",
    "dateReserved": "2026-06-16T10:18:08.635Z",
    "dateUpdated": "2026-08-25T14:28:37.339Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63072 (GCVE-0-2026-63072)

Vulnerability from cvelistv5 – Published: 2026-08-25 12:59 – Updated: 2026-08-25 14:29

Title

Heap Buffer Overflow in CMS Key Unwrapping

Summary

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a crafted CMS message can trigger a deterministic 8-byte out-of-bounds heap write when the victim decrypts it with CMS_decrypt(), corrupting the heap and typically resulting in a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: The key-wrap OID is potentially attacker-controlled on the wire. CMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers. An attacker can take a legitimate message and change a single OID byte to select the padded variant while leaving the message otherwise valid. Since the unwrap key is derived from the recipient's private operation (ECDH key agreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot pass, and the decryption fails with integrity failure. The write is a fixed-size (8-byte), fixed-value (zero) heap overflow immediately past the allocation, requires no special configuration, and is reachable from the public CMS_decrypt() function. The consequence is a heap corruption leading to a Denial of Service. The fix in the CMS code sizes the unwrap output buffer for the worst case so a failed unwrap cannot write past the allocation. FIPS impact: no As the CMS code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 14:29 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

openssl mitre root

References

6 references

URL	Tags
https://openssl-library.org/news/secadv/20260825.txt	vendor-advisory
https://github.com/openssl/openssl/commit/9530a5f…	patch
https://github.com/openssl/openssl/commit/2a3dac8…	patch
https://github.com/openssl/openssl/commit/87784ad…	patch
https://github.com/openssl/openssl/commit/9ec2f6d…	patch
https://github.com/openssl/openssl/commit/a0c8ec5…	patch

Impacted products

1 product

Vendor	Product	Version
OpenSSL	OpenSSL	Affected: 4.0.0 , < 4.0.2 (semver) Affected: 3.6.0 , < 3.6.4 (semver) Affected: 3.5.0 , < 3.5.8 (semver) Affected: 3.4.0 , < 3.4.7 (semver) Affected: 3.0.0 , < 3.0.22 (semver) Affected: 1.1.1 , < 1.1.1zi (custom)

Date Public

2026-08-25 11:36

Credits

Bhabani Sankar Das Filipe Casal(Trail of Bits) Daniel Kubec

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-63072",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T14:29:50.344129Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T14:29:55.378Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "4.0.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.8",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.7",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.22",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.1zi",
              "status": "affected",
              "version": "1.1.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bhabani Sankar Das"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Filipe Casal(Trail of Bits)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Kubec"
        }
      ],
      "datePublic": "2026-08-25T11:36:16.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\u003cbr\u003eon querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\u003cbr\u003ecan write and cleanse more bytes than that query reports, causing an 8-byte\u003cbr\u003eout-of-bounds heap write.\u003cbr\u003e\u003cbr\u003eImpact summary: An attacker who supplies a crafted CMS message can trigger a\u003cbr\u003edeterministic 8-byte out-of-bounds heap write when the victim decrypts it\u003cbr\u003ewith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\u003cbr\u003eof Service.\u003cbr\u003e\u003cbr\u003eCWE: CWE-787: Out-of-bounds Write\u003cbr\u003e\u003cbr\u003eDescription: The key-wrap OID is potentially attacker-controlled on the wire.\u003cbr\u003eCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\u003cbr\u003eAn attacker can take a legitimate message and change a single OID byte to\u003cbr\u003eselect the padded variant while leaving the message otherwise valid. Since\u003cbr\u003ethe unwrap key is derived from the recipient\u0027s private operation (ECDH key\u003cbr\u003eagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\u003cbr\u003epass, and the decryption fails with integrity failure.\u003cbr\u003e\u003cbr\u003eThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\u003cbr\u003eimmediately past the allocation, requires no special configuration, and is\u003cbr\u003ereachable from the public CMS_decrypt() function. The consequence is\u003cbr\u003ea heap corruption leading to a Denial of Service. The fix in the CMS code\u003cbr\u003esizes the unwrap output buffer for the worst case so a failed unwrap cannot\u003cbr\u003ewrite past the allocation.\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003e\u003cbr\u003eAs the CMS code lives outside the FIPS module boundary, no FIPS\u003cbr\u003emodules are affected by this CVE."
            }
          ],
          "value": "Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient\u0027s private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Moderate"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T12:59:34.428Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        },
        {
          "name": "4.0.2 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335"
        },
        {
          "name": "3.6.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756"
        },
        {
          "name": "3.5.8 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42"
        },
        {
          "name": "3.4.7 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a"
        },
        {
          "name": "3.0.22 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Heap Buffer Overflow in CMS Key Unwrapping",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2026-63072",
    "datePublished": "2026-08-25T12:59:34.428Z",
    "dateReserved": "2026-07-15T13:10:26.188Z",
    "dateUpdated": "2026-08-25T14:29:55.378Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63074 (GCVE-0-2026-63074)

Vulnerability from cvelistv5 – Published: 2026-08-25 12:59 – Updated: 2026-08-25 14:36

Title

CMP Indefinite Cache Growth of ExtraCerts

Summary

Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a server reuses an OSSL_CMP_CTX frequently, this cache of extraCerts may grow unboundedly, and a malicious client may flood a CMP server with requests driving this growth. Impact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX for the lifetime of a server process may observe unbounded memory growth in the event a malicious client repeatedly sends requests containing unique extra certificates, which may lead to OOM conditions. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: If a remote user sends CMP messages to a server with a list of extraCerts and the message is rejected, the extraCerts from the message remains in the server contexts untrusted certificate stack. This exposes servers with long lived ctx objects to Denial of Service attacks in which an attacker sends messages intending to be rejected with a large list of additional certificates repeatedly, forcing the server to store them indefinitely. The issue was fixed by removing the added extra certs if the message is rejected, using the same method as when the context is configured to not do caching at all. FIPS impact: no As the CMP code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 14:36 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

openssl mitre root

References

6 references

URL	Tags
https://openssl-library.org/news/secadv/20260825.txt	vendor-advisory
https://github.com/openssl/openssl/commit/74ae7f6…	patch
https://github.com/openssl/openssl/commit/01e5679…	patch
https://github.com/openssl/openssl/commit/75360af…	patch
https://github.com/openssl/openssl/commit/f636f9c…	patch
https://github.com/openssl/openssl/commit/21a5d96…	patch

Impacted products

1 product

Vendor	Product	Version
OpenSSL	OpenSSL	Affected: 4.0.0 , < 4.0.2 (semver) Affected: 3.6.0 , < 3.6.4 (semver) Affected: 3.5.0 , < 3.5.8 (semver) Affected: 3.4.0 , < 3.4.7 (semver) Affected: 3.0.0 , < 3.0.22 (semver)

Date Public

2026-08-25 11:36

Credits

Pavоl Žáčik (Red Hat) Neil Horman

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-63074",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T14:36:10.702053Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T14:36:13.170Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "4.0.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.8",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.7",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.22",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Pav\u043el \u017d\u00e1\u010dik (Red Hat)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Neil Horman"
        }
      ],
      "datePublic": "2026-08-25T11:36:16.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\u003cbr\u003eadditional certificates (extraCerts) sent in a CMP message, but never expunges\u003cbr\u003ethem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\u003cbr\u003efrequently, this cache of extraCerts may grow unboundedly, and a malicious\u003cbr\u003eclient may flood a CMP server with requests driving this growth.\u003cbr\u003e\u003cbr\u003eImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\u003cbr\u003efor the lifetime of a server process may observe unbounded memory growth in the\u003cbr\u003eevent a malicious client repeatedly sends requests containing unique extra\u003cbr\u003ecertificates, which may lead to OOM conditions.\u003cbr\u003e\u003cbr\u003eCWE: CWE-770: Allocation of Resources Without Limits or Throttling\u003cbr\u003e\u003cbr\u003eDescription: If a remote user sends CMP messages to a server with a list of\u003cbr\u003eextraCerts and the message is rejected, the extraCerts from the message remains\u003cbr\u003ein the server contexts untrusted certificate stack.  This exposes servers with\u003cbr\u003elong lived ctx objects to Denial of Service attacks in which an attacker sends\u003cbr\u003emessages intending to be rejected with a large list of additional certificates\u003cbr\u003erepeatedly, forcing the server to store them indefinitely.\u003cbr\u003e   \u003cbr\u003eThe issue was fixed by removing the added extra certs if the message is\u003cbr\u003erejected, using the same method as when the context is configured to not do\u003cbr\u003ecaching at all.\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003eAs the CMP code lives outside the FIPS module boundary, no FIPS\u003cbr\u003emodules are affected by this CVE."
            }
          ],
          "value": "Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\nadditional certificates (extraCerts) sent in a CMP message, but never expunges\nthem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\nfrequently, this cache of extraCerts may grow unboundedly, and a malicious\nclient may flood a CMP server with requests driving this growth.\n\nImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\nfor the lifetime of a server process may observe unbounded memory growth in the\nevent a malicious client repeatedly sends requests containing unique extra\ncertificates, which may lead to OOM conditions.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: If a remote user sends CMP messages to a server with a list of\nextraCerts and the message is rejected, the extraCerts from the message remains\nin the server contexts untrusted certificate stack.  This exposes servers with\nlong lived ctx objects to Denial of Service attacks in which an attacker sends\nmessages intending to be rejected with a large list of additional certificates\nrepeatedly, forcing the server to store them indefinitely.\n   \nThe issue was fixed by removing the added extra certs if the message is\nrejected, using the same method as when the context is configured to not do\ncaching at all.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Low"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T12:59:58.278Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        },
        {
          "name": "4.0.2 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/74ae7f6df47a5767c1010b88c47507dfc5b32c46"
        },
        {
          "name": "3.6.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/01e567978a55fba18142a230380c31296049fae7"
        },
        {
          "name": "3.5.8 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/75360af9650d4e0c82ba0050c5c9912cd79e54af"
        },
        {
          "name": "3.4.7 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/f636f9ca0fa1bae5b42f9e787f025c96fb09c43a"
        },
        {
          "name": "3.0.22 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CMP Indefinite Cache Growth of ExtraCerts",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2026-63074",
    "datePublished": "2026-08-25T12:59:58.278Z",
    "dateReserved": "2026-07-15T13:10:26.188Z",
    "dateUpdated": "2026-08-25T14:36:13.170Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63076 (GCVE-0-2026-63076)

Vulnerability from cvelistv5 – Published: 2026-08-25 13:00 – Updated: 2026-08-25 14:37

Title

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

Summary

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid pointer. Impact summary: A remote, unauthenticated attacker can crash an application acting as a CMP server that accepts PBM-protected messages, or a CMP client talking to a malicious or intercepted CMP server, resulting in a Denial of Service. CWE: CWE-476: NULL Pointer Dereference Description: When verifying the password-based MAC protection of a CMP message, OpenSSL library reads the protectionAlg algorithm parameter with X509_ALGOR_get0(), which returns both the parameter type and its value pointer. The value is then cast to an ASN1_STRING and treated as the expected PBMParameter after only checking that pointer is not NULL. The parameter type returned by X509_ALGOR_get0() was never consulted. This happens during protection verification, before any MAC is computed, so no knowledge of the PBM shared secret is required; the only precondition is that PBM verification is reachable. On the server side this is reached from OSSL_CMP_SRV_process_request() for any application that stands up a CMP server accepting PBM-protected messages, and on the client side from CMP response validation against a malicious or on-path (MITM) server. The reliable consequence is a denial of service; there is no memory disclosure, no controlled memory write, and no path to code execution. CMP is a specialized feature that an application must explicitly enable. FIPS impact: no As the CMP code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-25 14:37 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

openssl mitre root

References

6 references

URL	Tags
https://openssl-library.org/news/secadv/20260825.txt	vendor-advisory
https://github.com/openssl/openssl/commit/a17cc8d…	patch
https://github.com/openssl/openssl/commit/a7af46a…	patch
https://github.com/openssl/openssl/commit/cdacfff…	patch
https://github.com/openssl/openssl/commit/a1f348c…	patch
https://github.com/openssl/openssl/commit/37882aa…	patch

Impacted products

1 product

Vendor	Product	Version
OpenSSL	OpenSSL	Affected: 4.0.0 , < 4.0.2 (semver) Affected: 3.6.0 , < 3.6.4 (semver) Affected: 3.5.0 , < 3.5.8 (semver) Affected: 3.4.0 , < 3.4.7 (semver) Affected: 3.0.0 , < 3.0.22 (semver)

Date Public

2026-08-25 11:36

Credits

Ying Dong Bhabani Sankar Das Daniel Kubec

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-63076",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T14:37:28.943884Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T14:37:32.193Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "4.0.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.8",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.7",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.22",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Ying Dong"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bhabani Sankar Das"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Kubec"
        }
      ],
      "datePublic": "2026-08-25T11:36:16.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: OpenSSL CMP password based protection verification only\u003cbr\u003echecks whether the protectionAlg parameter was not NULL and not its\u003cbr\u003eASN.1 type, before treating it as a PBMParameter. A crafted message can\u003cbr\u003econtain a parameter of a different type, which is then dereferenced as an\u003cbr\u003einvalid pointer.\u003cbr\u003e\u003cbr\u003eImpact summary: A remote, unauthenticated attacker can crash an application\u003cbr\u003eacting as a CMP server that accepts PBM-protected messages, or a CMP client\u003cbr\u003etalking to a malicious or intercepted CMP server, resulting in a Denial of\u003cbr\u003eService.\u003cbr\u003e\u003cbr\u003eCWE: CWE-476: NULL Pointer Dereference\u003cbr\u003e\u003cbr\u003eDescription: When verifying the password-based MAC protection of a CMP\u003cbr\u003emessage, OpenSSL library reads the protectionAlg algorithm parameter with\u003cbr\u003eX509_ALGOR_get0(), which returns both the parameter type and its value\u003cbr\u003epointer. The value is then cast to an ASN1_STRING and treated as the\u003cbr\u003eexpected PBMParameter after only checking that pointer is not NULL. The\u003cbr\u003eparameter type returned by X509_ALGOR_get0() was never consulted.\u003cbr\u003e\u003cbr\u003eThis happens during protection verification, before any MAC is computed, so\u003cbr\u003eno knowledge of the PBM shared secret is required; the only precondition is\u003cbr\u003ethat PBM verification is reachable. On the server side this is reached from\u003cbr\u003eOSSL_CMP_SRV_process_request() for any application that stands up a CMP\u003cbr\u003eserver accepting PBM-protected messages, and on the client side from CMP\u003cbr\u003eresponse validation against a malicious or on-path (MITM) server. The\u003cbr\u003ereliable consequence is a denial of service; there is no memory disclosure,\u003cbr\u003eno controlled memory write, and no path to code execution. CMP is a\u003cbr\u003especialized feature that an application must explicitly enable.\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003eAs the CMP code lives outside the FIPS module boundary, no FIPS modules\u003cbr\u003eare affected by this CVE."
            }
          ],
          "value": "Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Moderate"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T13:00:11.218Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        },
        {
          "name": "4.0.2 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e"
        },
        {
          "name": "3.6.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226"
        },
        {
          "name": "3.5.8 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c"
        },
        {
          "name": "3.4.7 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259"
        },
        {
          "name": "3.0.22 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Invalid Pointer Dereference in CMP Server via Crafted protectionAlg",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2026-63076",
    "datePublished": "2026-08-25T13:00:11.218Z",
    "dateReserved": "2026-07-15T13:10:26.188Z",
    "dateUpdated": "2026-08-25T14:37:32.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-75803 (GCVE-0-2026-75803)

Vulnerability from cvelistv5 – Published: 2026-08-25 13:00 – Updated: 2026-09-01 18:23

Title

AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

Summary

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function. Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and expecting the call to check the AEAD tag may accept forged messages. CWE: CWE-354 (Improper Validation of Integrity Check Value) Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one shot encryption and decryption call. It also verifies the AEAD tag after the decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers it skipped the AEAD tag verification when an empty ciphertext was passed to the function. The callers of this function might believe that a successful return indicates a valid AEAD tag for these ciphers, even when that has not truly been validated in this case. FIPS impact: no The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as the affected algorithms are not FIPS approved and thus not implemented in the FIPS module.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-01 18:22 UTC

CWE

CWE-354 - Improper Validation of Integrity Check Value

Assigner

openssl mitre root

References

6 references

URL	Tags
https://openssl-library.org/news/secadv/20260825.txt	vendor-advisory
https://github.com/openssl/openssl/commit/6c7aa6f…	patch
https://github.com/openssl/openssl/commit/3621257…	patch
https://github.com/openssl/openssl/commit/bdeb0cd…	patch
https://github.com/openssl/openssl/commit/bf95f5f…	patch
https://github.com/openssl/openssl/commit/119ab95…	patch

Impacted products

1 product

Vendor	Product	Version
OpenSSL	OpenSSL	Affected: 4.0.0 , < 4.0.2 (semver) Affected: 3.6.0 , < 3.6.4 (semver) Affected: 3.5.0 , < 3.5.8 (semver) Affected: 3.4.0 , < 3.4.7 (semver) Affected: 3.0.0 , < 3.0.22 (semver)

Date Public

2026-08-25 15:57

Credits

Billy Brumley (Rochester Institute of Technology) Billy Brumley (Rochester Institute of Technology)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-75803",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-01T18:22:51.167833Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-01T18:23:06.793Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "4.0.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5.8",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.7",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.22",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Billy Brumley (Rochester Institute of Technology)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Billy Brumley (Rochester Institute of Technology)"
        }
      ],
      "datePublic": "2026-08-25T15:57:42.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\u003cbr\u003eciphertext can report success without verifying the supplied authentication\u003cbr\u003etag when the operation is finalized by calling the EVP_Cipher() function.\u003cbr\u003e\u003cbr\u003eImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\u003cbr\u003eexpecting the call to check the AEAD tag may accept forged messages.\u003cbr\u003e\u003cbr\u003eCWE: CWE-354 (Improper Validation of Integrity Check Value)\u003cbr\u003e\u003cbr\u003eDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\u003cbr\u003eshot encryption and decryption call. It also verifies the AEAD tag after the\u003cbr\u003edecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\u003cbr\u003eit skipped the AEAD tag verification when an empty ciphertext was passed to\u003cbr\u003ethe function. The callers of this function might believe that a successful\u003cbr\u003ereturn indicates a valid AEAD tag for these ciphers, even when that has not\u003cbr\u003etruly been validated in this case.\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003eThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\u003cbr\u003eas the affected algorithms are not FIPS approved and thus not implemented\u003cbr\u003ein the FIPS module."
            }
          ],
          "value": "Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Low"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T13:00:25.067Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        },
        {
          "name": "4.0.2 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a"
        },
        {
          "name": "3.6.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b"
        },
        {
          "name": "3.5.8 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34"
        },
        {
          "name": "3.4.7 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9"
        },
        {
          "name": "3.0.22 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2026-75803",
    "datePublished": "2026-08-25T13:00:25.067Z",
    "dateReserved": "2026-08-18T09:34:32.659Z",
    "dateUpdated": "2026-09-01T18:23:06.793Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:23512-1

CVE-2026-54874 (GCVE-0-2026-54874)

CVE-2026-63072 (GCVE-0-2026-63072)

CVE-2026-63074 (GCVE-0-2026-63074)

CVE-2026-63076 (GCVE-0-2026-63076)

CVE-2026-75803 (GCVE-0-2026-75803)

Tags

Sightings

Nomenclature

Related by attack behaviour