CVE-2026-42765
NULL Dereference in Certificate Verification with OCSP Checking
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process.
Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.
When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens.
This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue.
No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
NULL Dereference in Certificate Verification with OCSP Checking
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process.
Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.
When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens.
This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue.
No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
CVE-2026-42765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2026-35482
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process.
Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.
When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens.
This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue.
No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
EUVD-2026-35482- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vm8w-j6fw-jc7r
Issue summary: When a partial-chain certificate verification is enabled together with OCSP...
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process.
Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.
When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens.
This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue.
No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
GHSA-vm8w-j6fw-jc7r- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process.
Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.
When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens.
This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue.
No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
CVE-2026-42765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVBELL-CVE-2026-42765
CVE-2026-42765 does not affect BellSoft software
- Record
BELL-CVE-2026-42765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
NULL Dereference in Certificate Verification with OCSP Checking
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process.
Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.
When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens.
This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue.
No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
CVE-2026-42765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2026-42765
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application. When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens. This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue. No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
DEBIAN-CVE-2026-42765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42825
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:42825- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:55543
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:55543- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:59635
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:59635- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:59641
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:59641- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:62562
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:62562- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:62563
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- Record
RHSA-2026:62563- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:62790
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:62790- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:67551
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:67551- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-42765
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application. When performing OCSP response checking for certificates in the verification chain, the code always tries to access the next certificate as the issuer. There is a check for a self-signed certificate. However with the partial chain verification enabled when the chain does not have a self-signed trusted anchor, the issuer will be NULL for the last certificate in the chain. A NULL pointer dereference then happens. This issue affects only applications which enable both OCSP verification of the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial chain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate verification. Both flags are disabled by default. For that reason, we have assigned Low severity to the issue. No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.
- Record
UBUNTU-CVE-2026-42765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:14 |
before 3.6.3-1, plus listed versions 3.5.1-13.5.2-13.5.3-13.5.4-13.5.4-1~deb13u1 Show 17 moreShow less3.5.4-1~deb13u23.5.5-13.5.5-1~deb13u13.5.5-1~deb13u23.5.6-1~deb13u13.5.6-1~deb13u23.5.7-1~deb13u13.5.7-1~deb13u23.5.7-1~deb13u33.6.0-13.6.0-23.6.0~~alpha1-13.6.0~~beta1-13.6.1-13.6.1-23.6.1-33.6.2-1 |
3.6.3-1 |
chunkahRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:0.6.0-3.hum1 | 0:0.6.0-3.hum1 |
python-cryptographyRed Hat:hummingbird:1 From an advisory covering 24 CVEs |
before 0:50.0.0-1.hum1 | 0:50.0.0-1.hum1 |
python3-cryptographyRed Hat:hummingbird:1 From an advisory covering 24 CVEs |
before 0:50.0.0-1.hum1 | 0:50.0.0-1.hum1 |
openssl3Red Hat:hummingbird:1 From an advisory covering 27 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl3-develRed Hat:hummingbird:1 From an advisory covering 27 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl3-devel-engineRed Hat:hummingbird:1 From an advisory covering 27 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl3-libsRed Hat:hummingbird:1 From an advisory covering 27 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
opensslRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl-config-fipsRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
Show 62 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssl-develRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl-devel-engineRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl-fips-provider-upstreamRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl-libsRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
openssl-perlRed Hat:hummingbird:1 From an advisory covering 28 CVEs |
before 0:3.5.8-0.1.hum1 | 0:3.5.8-0.1.hum1 |
ruby3.3Red Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.3.10-23.6.hum1 | 0:3.3.10-23.6.hum1 |
ruby3.3-bundled-gemsRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.3.10-23.6.hum1 | 0:3.3.10-23.6.hum1 |
ruby3.3-default-gemsRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.3.10-23.6.hum1 | 0:3.3.10-23.6.hum1 |
ruby3.3-develRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.3.10-23.6.hum1 | 0:3.3.10-23.6.hum1 |
ruby3.3-docRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.3.10-23.6.hum1 | 0:3.3.10-23.6.hum1 |
ruby3.3-libsRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.3.10-23.6.hum1 | 0:3.3.10-23.6.hum1 |
rubygem3.3-bigdecimalRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.1.5-23.6.hum1 | 0:3.1.5-23.6.hum1 |
rubygem3.3-bundlerRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:2.5.22-23.6.hum1 | 0:2.5.22-23.6.hum1 |
rubygem3.3-develRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.5.22-23.6.hum1 | 0:3.5.22-23.6.hum1 |
rubygem3.3-io-consoleRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:0.7.1-23.6.hum1 | 0:0.7.1-23.6.hum1 |
rubygem3.3-irbRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:1.13.1-23.6.hum1 | 0:1.13.1-23.6.hum1 |
rubygem3.3-jsonRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:2.7.2-23.6.hum1 | 0:2.7.2-23.6.hum1 |
rubygem3.3-minitestRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:5.20.0-23.6.hum1 | 0:5.20.0-23.6.hum1 |
rubygem3.3-power_assertRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:2.0.3-23.6.hum1 | 0:2.0.3-23.6.hum1 |
rubygem3.3-psychRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:5.1.2-23.6.hum1 | 0:5.1.2-23.6.hum1 |
rubygem3.3-raccRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:1.7.3-23.6.hum1 | 0:1.7.3-23.6.hum1 |
rubygem3.3-rakeRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:13.1.0-23.6.hum1 | 0:13.1.0-23.6.hum1 |
rubygem3.3-rbsRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.4.0-23.6.hum1 | 0:3.4.0-23.6.hum1 |
rubygem3.3-rdocRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:6.6.3.1-23.6.hum1 | 0:6.6.3.1-23.6.hum1 |
rubygem3.3-rexmlRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.4.4-23.6.hum1 | 0:3.4.4-23.6.hum1 |
rubygem3.3-rssRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:0.3.1-23.6.hum1 | 0:0.3.1-23.6.hum1 |
rubygem3.3-rubygemsRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.5.22-23.6.hum1 | 0:3.5.22-23.6.hum1 |
rubygem3.3-test-unitRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:3.6.1-23.6.hum1 | 0:3.6.1-23.6.hum1 |
rubygem3.3-typeprofRed Hat:hummingbird:1 From an advisory covering 22 CVEs |
before 0:0.21.9-23.6.hum1 | 0:0.21.9-23.6.hum1 |
ruby4.0Red Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.6-37.3.hum1 | 0:4.0.6-37.3.hum1 |
ruby4.0-bundled-gemsRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.6-37.3.hum1 | 0:4.0.6-37.3.hum1 |
ruby4.0-default-gemsRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.6-37.3.hum1 | 0:4.0.6-37.3.hum1 |
ruby4.0-develRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.6-37.3.hum1 | 0:4.0.6-37.3.hum1 |
ruby4.0-docRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.6-37.3.hum1 | 0:4.0.6-37.3.hum1 |
ruby4.0-libsRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.6-37.3.hum1 | 0:4.0.6-37.3.hum1 |
rubygem4.0-bigdecimalRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.1-37.3.hum1 | 0:4.0.1-37.3.hum1 |
rubygem4.0-bundlerRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.16-37.3.hum1 | 0:4.0.16-37.3.hum1 |
rubygem4.0-develRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.16-37.3.hum1 | 0:4.0.16-37.3.hum1 |
rubygem4.0-io-consoleRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:0.8.2-37.3.hum1 | 0:0.8.2-37.3.hum1 |
rubygem4.0-irbRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:1.16.0-37.3.hum1 | 0:1.16.0-37.3.hum1 |
rubygem4.0-jsonRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:2.18.0-37.3.hum1 | 0:2.18.0-37.3.hum1 |
rubygem4.0-minitestRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:6.0.0-37.3.hum1 | 0:6.0.0-37.3.hum1 |
rubygem4.0-power_assertRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:3.0.1-37.3.hum1 | 0:3.0.1-37.3.hum1 |
rubygem4.0-psychRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:5.3.1-37.3.hum1 | 0:5.3.1-37.3.hum1 |
rubygem4.0-raccRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:1.8.1-37.3.hum1 | 0:1.8.1-37.3.hum1 |
rubygem4.0-rakeRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:13.3.1-37.3.hum1 | 0:13.3.1-37.3.hum1 |
rubygem4.0-rbsRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:3.10.0-37.3.hum1 | 0:3.10.0-37.3.hum1 |
rubygem4.0-rdocRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:7.0.4-37.3.hum1 | 0:7.0.4-37.3.hum1 |
rubygem4.0-rexmlRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:3.4.4-37.3.hum1 | 0:3.4.4-37.3.hum1 |
rubygem4.0-rssRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:0.3.2-37.3.hum1 | 0:0.3.2-37.3.hum1 |
rubygem4.0-rubygemsRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:4.0.16-37.3.hum1 | 0:4.0.16-37.3.hum1 |
rubygem4.0-test-unitRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:3.7.5-37.3.hum1 | 0:3.7.5-37.3.hum1 |
rubygem4.0-typeprofRed Hat:hummingbird:1 From an advisory covering 21 CVEs |
before 0:0.31.1-37.3.hum1 | 0:0.31.1-37.3.hum1 |
ruby3.4Red Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:3.4.10-31.7.hum1 | 0:3.4.10-31.7.hum1 |
ruby3.4-bundled-gemsRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:3.4.10-31.7.hum1 | 0:3.4.10-31.7.hum1 |
ruby3.4-default-gemsRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:3.4.10-31.7.hum1 | 0:3.4.10-31.7.hum1 |
ruby3.4-develRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:3.4.10-31.7.hum1 | 0:3.4.10-31.7.hum1 |
ruby3.4-docRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:3.4.10-31.7.hum1 | 0:3.4.10-31.7.hum1 |
ruby3.4-libsRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:3.4.10-31.7.hum1 | 0:3.4.10-31.7.hum1 |
bootupdRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:0.3.2-1.hum1 | 0:0.3.2-1.hum1 |
rust-bootupdRed Hat:hummingbird:1 From an advisory covering 19 CVEs |
before 0:0.3.2-1.hum1 | 0:0.3.2-1.hum1 |
nodejsUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 12.22.5~dfsg-5ubuntu112.22.7~dfsg-2ubuntu112.22.7~dfsg-2ubuntu312.22.9~dfsg-1ubuntu212.22.9~dfsg-1ubuntu3 Show 7 moreShow less12.22.9~dfsg-1ubuntu3.112.22.9~dfsg-1ubuntu3.212.22.9~dfsg-1ubuntu3.312.22.9~dfsg-1ubuntu3.412.22.9~dfsg-1ubuntu3.512.22.9~dfsg-1ubuntu3.612.22.9~dfsg-1ubuntu3.6+esm2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-42765 is a high vulnerability (CVSS 7.5) in Openssl, published June 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in openssl 3.6.3-1.
References
openssl-library.org/news/secadv/20260609.txt
github.com/openssl/openssl/commit/14340b7fa1d444615486bc137014b064e64ec334
nvd.nist.gov/vuln/detail/CVE-2026-42765
Show 192 moreShow less
docs.bell-sw.com/security/cves/CVE-2026-42765
security-tracker.debian.org/tracker/CVE-2026-42765
access.redhat.com/errata/RHSA-2026:42825
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42825.json
bugzilla.redhat.com/show_bug.cgi?id=2481879
cve.org/CVERecord?id=CVE-2026-7383
vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string
ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv
ubuntu.com/security/CVE-2026-42765