DeutschShown in its original language — a full translation is planned for a future version.
OpenSSL: Mehrere Schwachstellen
view advisory published 2026-08-25
Ein Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-75803US | — | — | ||
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty
ciphertext can report success without verifying the supplied authentication
tag when the operation is finalize… | ||||
| CVE-2026-63076US | — | — | ||
Issue summary: OpenSSL CMP password based protection verification only
checks whether the protectionAlg parameter was not NULL and not its
ASN.1 type, before treating it as a PBMPa… | ||||
| CVE-2026-63075US | — | — | ||
Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly
sends ack-eliciting packets while not acknowledging ACK-only responses, the
QUIC stack can retain ACK… | ||||
| CVE-2026-63074US | — | — | ||
Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches
additional certificates (extraCerts) sent in a CMP message, but never expunges
them (for instance if they ar… | ||||
| CVE-2026-63073US | — | — | ||
Issue summary: OpenSSL CMP response validation passed an unexpected response
sender distinguished name directly as the format string to `ERR_raise_data()`.
Impact summary: A malic… | ||||
| CVE-2026-63072US | — | Exploit | ||
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based
on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive
can write and cleanse more… | ||||
| CVE-2026-54874US | — | — | ||
Issue summary: Receiving a DTLS record for a future epoch while a handshake
is in progress causes OpenSSL to buffer far more memory than the record
itself requires.
Impact summary… | ||||
| CVE-2026-18798US | — | — | ||
Issue summary: QUIC server may double free QRX (QUIC record layer RX) object
when channel creation fails for initial packet.
Impact summary: Double free leads to heap corruption,… | ||||
| CVE-2026-14457US | — | — | ||
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs)
enabled, and only the private key (with no associated certificate) configured locally,
a NULL… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-80514 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:59641 vom 2026-09-29external
- Red Hat Security Advisory RHSA-2026:67154 vom 2026-09-14external
- Red Hat Security Advisory RHSA-2026:67165 vom 2026-09-14external
- Red Hat Security Advisory RHSA-2026:79088 vom 2026-10-08external
- Red Hat Security Advisory RHSA-2026:79357 vom 2026-10-08external
- Red Hat Security Advisory RHSA-2026:80514 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:81201 vom 2026-10-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan