Every CVE Search/ Get API key

CVE-2026-63073

Untrusted Sender DN Used as Format String in CMP Response Validation

9.8 CriticalFix available

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.16%Up 0.8 points since Aug 26, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

Untrusted Sender DN Used as Format String in CMP Response Validation

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-134
Updated
2026-11-02
EUVDEUVD-2026-65483 9.8

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
EUVD-2026-65483
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-826x-qg76-xqjx 9.8

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished...

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
GHSA-826x-qg76-xqjx
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-134
Updated
2026-11-02
NVD 9.8

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-134
Updated
2026-11-02
OSVALPINE-CVE-2026-63073 9.8

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
ALPINE-CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-63073 9.8
Record
BELL-CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 20 moreShow less
OSV 9.8

Untrusted Sender DN Used as Format String in CMP Response Validation

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-134
Updated
2026-11-02
OSVDEBIAN-CVE-2026-63073 9.8

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data(). Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender. CWE: CWE-134 (Use of Externally-Controlled Format String) Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses. Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
DEBIAN-CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3830 7.5

openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Security Fix(es):

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension.

Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible.

CWE: CWE-476: NULL Pointer Dereference

Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA).

When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or servers that don't support raw public keys may be able to complete a TLS connection by pinning or verifying the corresponding certificate or its public key.

Deployments that prefer to configure just a private key with no certificate need to upgrade to an updated release as noted below.

FIPS impact: no

No FIPS modules are affected by this issue, as the SSL protocol implementation is outside the OpenSSL FIPS module boundary.(CVE-2026-14457)

Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet.

Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence that this double free is exploitable for remote code execution, thus it is considered highly improbable.

CWE: CWE-415: Double Free

Description: In order to validate initial packet, OpenSSL QUIC stack default packet handler (port_default_packet_handler()) creates a so-called QRX object. If the initial packet validates successfully with QRX object, the default packet handler proceeds to channel (connection object) creation. The QRX object used for packet validation is passed to port_bind_channel(), so it becomes part of the newly created connection. If port_bind_channel() fails, then it also frees the QRX object. Once port_bind_channel() returns, the port_default_packet_handler() detects the failure and proceeds to the error branch, where the same QRX object is freed for the second time.

The failure in port_bind_channel() function can be induced with a relatively low effort by a malformed (non RFC 9000 compliant) INITIAL packet. If the packet carries DCID (destination connection ID) which is shorter than 8 bytes, then port_bind_channel() jumps to the error path after ossl_quic_lcidm_enrol_odcid() detects that the DCID has invalid length.

FIPS impact: no The FIPS module is not affected, as the QUIC implementation is outside of the OpenSSL FIPS module boundary.(CVE-2026-18798)

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires.

Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amount of memory, which may lead to a Denial of Service.

CWE: CWE-405: Asymmetric Resource Consumption (Amplification)

Description: While a DTLS handshake is in progress, a peer may legitimately have already moved on to the next epoch (for example, having sent its ChangeCipherSpec and Finished messages) before the local endpoint has processed the same transition, typically because of reordering on the underlying UDP transport. OpenSSL buffers such early…

Record
OESA-2026-3830
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:59635 9.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:59635
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:59641 9.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:59641
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:67154 7.5

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Record
RHSA-2026:67154
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:67165 7.5

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Record
RHSA-2026:67165
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:67154 7.5

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)

  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)

  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)

  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)

  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)

  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)

  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)

  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)

  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [Rocky Linux 10.2.z] (JIRA:Rocky Linux-212362)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67154
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:67165 7.5

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)

  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)

  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)

  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)

  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)

  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)

  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)

  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)

  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [Rocky Linux 9.8.z] (JIRA:Rocky Linux-232828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67165
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-63073 9.8

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data(). Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender. CWE: CWE-134 (Use of Externally-Controlled Format String) Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses. Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
UBUNTU-CVE-2026-63073
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:67154 No score

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)
  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)
  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)
  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)
  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)
  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)
  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)
  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)
  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 10.2.z] (JIRA:AlmaLinux-212362)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67154
Updated
2026-11-02
OSVALSA-2026:67165 No score

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)
  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)
  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)
  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)
  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)
  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)
  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)
  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)
  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 9.8.z] (JIRA:AlmaLinux-232828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67165
Updated
2026-11-02
OSVAZL-97950 No score

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERR_raise_data().

Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject becomes the default expected sender.

CWE: CWE-134 (Use of Externally-Controlled Format String)

Description: When validating a received CMP message, ossl_cmp_msg_check_update() converts the peer-supplied sender distinguished name with X509_NAME_oneline() and passes it directly as the format argument to ERR_raise_data(). Percent characters survive the conversion, so a sender DN such as "CN=%s%n" reaches BIO_vsnprintf() as an attacker-controlled format string with no matching variadic arguments. This path is only reached when the caller configures an expected sender or pins a server certificate, which is the normal configuration for a CMP client validating server responses.

Since the attacker controls the format string but none of the variadic arguments, such specifiers as %s and %n dereference or write through unrelated stack contents and crash the client. The reliable consequence is a denial of service, when the response comes from a malicious or intercepted CMP endpoint. There is no controlled memory write, arbitrary-address read, or reliable path to remote code execution.

FIPS impact: no

No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary.

Record
AZL-97950
Updated
2026-11-05
OSVMGASA-2026-0353 No score

Updated openssl packages fix security vulnerabilities

Unbounded Memory Growth in QUIC Server Incoming Channel Queue. (CVE-2026-14456) QUIC Server May Trigger Double Free When Processing INITIAL Packet. (CVE-2026-18798) Heap Buffer Overflow in CMS Key Unwrapping. (CVE-2026-63072) Invalid Pointer Dereference in CMP Server via Crafted protectionAlg. (CVE-2026-63076) RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate. (CVE-2026-14457) Excessive Memory Use Buffering DTLS Records for a Future Epoch. (CVE-2026-54874) Untrusted Sender DN Used as Format String in CMP Response Validation. (CVE-2026-63073) CMP Indefinite Cache Growth of ExtraCerts. (CVE-2026-63074) QUIC ACK-only Packet Retention Can Cause Memory Exhaustion. (CVE-2026-63075)

Record
MGASA-2026-0353
Updated
2026-11-02
OSVopenSUSE-SU-2026:11623-1 No score

libopenssl-3-devel-3.5.3-8.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11623-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21744-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
openSUSE-SU-2026:21744-1
Updated
2026-11-02
OSVSUSE-SU-2026:23463-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
SUSE-SU-2026:23463-1
Updated
2026-11-02
OSVSUSE-SU-2026:23609-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
SUSE-SU-2026:23609-1
Updated
2026-11-02
OSVSUSE-SU-2026:4039-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
SUSE-SU-2026:4039-1
Updated
2026-11-02
OSVUSN-8678-1 No score

openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-14456)

It was discovered that OpenSSL incorrectly handled signature algorithm selection when using Raw Public Keys. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-14457)

It was discovered that OpenSSL incorrectly handled QUIC INITIAL packet processing. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-18798)

It was discovered that OpenSSL incorrectly handled buffering of DTLS records for a future epoch. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. (CVE-2026-54874)

It was discovered that OpenSSL incorrectly handled CMS key unwrapping. A remote attacker could possibly use this issue to cause a heap buffer overflow, leading to a denial of service or arbitrary code execution. (CVE-2026-63072)

It was discovered that OpenSSL incorrectly validated the sender distinguished name in CMP response messages. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-63073)

It was discovered that OpenSSL incorrectly limited the growth of an internal certificate cache used during CMP operations. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. (CVE-2026-63074)

It was discovered that OpenSSL incorrectly handled QUIC ACK-only packet retention. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-63075)

It was discovered that OpenSSL incorrectly handled CMP protection algorithm validation. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-63076)

It was discovered that OpenSSL incorrectly verified authentication tags when using certain AEAD ciphers via the EVP_Cipher() interface. An attacker could possibly use this issue to perform AEAD forgery attacks. (CVE-2026-75803)

Record
USN-8678-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
Alpine:v3.21
 3.4.0 up to 3.3.7-r1
3.3.7-r1
openssl
Alpine:v3.22
 3.4.0 up to 3.5.8-r0
3.5.8-r0
openssl
Alpine:v3.23
 3.4.0 up to 3.5.8-r0
3.5.8-r0
openssl
Alpine:v3.24
 3.4.0 up to 3.5.8-r0
3.5.8-r0
openssl
AlmaLinux:10
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl-devel
AlmaLinux:10
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl-libs
AlmaLinux:10
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl-perl
AlmaLinux:10
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
Show 58 moreShow less
Affected packages
PackageAffectedFixed
openssl-libs
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-perl
AlmaLinux:9
From an advisory covering 10 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Azure Linux:3
 before 3.3.7-6
3.3.7-6
openssl
Alpaquita:25
 3.5.0-r0 up to 3.5.8-r0
3.5.8-r0
openssl
Alpaquita:stream
 3.1.1-r1 up to 3.5.8-r0
3.5.8-r0
openssl
BellSoft Hardened Containers:25
 3.5.0-r0 up to 3.5.8-r0
3.5.8-r0
openssl
BellSoft Hardened Containers:stream
 3.1.1-r1 up to 3.5.8-r0
3.5.8-r0
openssl
Debian:13
 before 3.5.7-1~deb13u2, plus listed versions
3.5.1-13.5.1-1+deb13u13.5.2-13.5.3-13.5.4-1
Show 8 moreShow less
3.5.4-1~deb13u13.5.4-1~deb13u23.5.5-13.5.5-1~deb13u13.5.5-1~deb13u23.5.6-1~deb13u13.5.6-1~deb13u23.5.7-1~deb13u1
3.5.7-1~deb13u2
openssl
Debian:14
 before 3.6.4-1, plus listed versions
3.5.1-13.5.2-13.5.3-13.5.4-13.5.4-1~deb13u1
Show 18 moreShow less
3.5.4-1~deb13u23.5.5-13.5.5-1~deb13u13.5.5-1~deb13u23.5.6-1~deb13u13.5.6-1~deb13u23.5.7-1~deb13u13.5.7-1~deb13u23.5.7-1~deb13u33.6.0-13.6.0-23.6.0~~alpha1-13.6.0~~beta1-13.6.1-13.6.1-23.6.1-33.6.2-13.6.3-1
3.6.4-1
openssl
Mageia:10
From an advisory covering 10 CVEs
 before 3.5.8-1.mga10
3.5.8-1.mga10
openssl
Mageia:9
From an advisory covering 10 CVEs
 before 3.0.22-1.mga9
3.0.22-1.mga9
openssl
openEuler:24.03-LTS-SP4
From an advisory covering 9 CVEs
 before 3.5.6-7.oe2403sp4
3.5.6-7.oe2403sp4
openssl3
Red Hat:hummingbird:1
From an advisory covering 27 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl3-devel
Red Hat:hummingbird:1
From an advisory covering 27 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl3-devel-engine
Red Hat:hummingbird:1
From an advisory covering 27 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl3-libs
Red Hat:hummingbird:1
From an advisory covering 27 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-config-fips
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-devel
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-devel-engine
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-fips-provider-upstream
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-libs
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-perl
Red Hat:hummingbird:1
From an advisory covering 28 CVEs
 before 0:3.5.8-0.1.hum1
0:3.5.8-0.1.hum1
openssl-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-perl
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-perl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Red Hat:enterprise_linux:9::baseos
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Rocky Linux:10
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl
Rocky Linux:9
From an advisory covering 9 CVEs
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-3
SUSE:Linux Micro 6.2
From an advisory covering 11 CVEs
 before 3.5.0-160000.10.1
3.5.0-160000.10.1
openssl-3
SUSE:Linux Enterprise Server 16.0
From an advisory covering 11 CVEs
 before 3.5.0-160000.10.1
3.5.0-160000.10.1
openssl-3
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 11 CVEs
 before 3.5.0-160000.10.1
3.5.0-160000.10.1
openssl-3
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 11 CVEs
 before 3.5.0-150700.5.50.1
3.5.0-150700.5.50.1
nodejs
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.10.25~dfsg2-2ubuntu14.2.2~dfsg-14.2.3~dfsg-14.2.4~dfsg-1ubuntu14.2.4~dfsg-2
Show 7 moreShow less
4.2.6~dfsg-1ubuntu14.2.6~dfsg-1ubuntu44.2.6~dfsg-1ubuntu4.14.2.6~dfsg-1ubuntu4.24.2.6~dfsg-1ubuntu4.2+esm14.2.6~dfsg-1ubuntu4.2+esm24.2.6~dfsg-1ubuntu4.2+esm3
 None known
nodejs
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
6.11.4~dfsg-1ubuntu16.11.4~dfsg-1ubuntu26.12.0~dfsg-1ubuntu16.12.0~dfsg-2ubuntu16.12.0~dfsg-2ubuntu2
Show 10 moreShow less
8.10.0~dfsg-28.10.0~dfsg-2ubuntu0.28.10.0~dfsg-2ubuntu0.38.10.0~dfsg-2ubuntu0.48.10.0~dfsg-2ubuntu0.4+esm18.10.0~dfsg-2ubuntu0.4+esm28.10.0~dfsg-2ubuntu0.4+esm38.10.0~dfsg-2ubuntu0.4+esm48.10.0~dfsg-2ubuntu0.4+esm58.10.0~dfsg-2ubuntu0.4+esm6
 None known
edk2
Ubuntu:26.10
 All versions, plus listed versions
2025.11-3ubuntu72025.11-3ubuntu82026.05-2ubuntu12026.05-2ubuntu22026.05-2ubuntu3
 None known
edk2-hwe
Ubuntu:26.10
 All versions, plus listed versions
2025.11-3ubuntu82025.11-3ubuntu92026.05-2ubuntu12026.05-2ubuntu22026.05-2ubuntu3
 None known
edk2
Ubuntu:26.04:LTS
 All versions, plus listed versions
2025.02-8ubuntu32025.11-3ubuntu62025.11-3ubuntu72025.11-3ubuntu7.22025.11-3ubuntu7.3
 None known
edk2-hwe
Ubuntu:26.04:LTS
 All versions, plus listed versions
2025.11-3ubuntu62025.11-3ubuntu82025.11-3ubuntu8.2
 None known
openssl
Ubuntu:26.04:LTS
 before 3.5.5-1ubuntu3.4, plus listed versions
3.5.3-1ubuntu23.5.5-1ubuntu13.5.5-1ubuntu33.5.5-1ubuntu3.23.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
openssl
Ubuntu:22.04:LTS
From an advisory covering 10 CVEs
 before 3.0.2-0ubuntu1.29, plus listed versions
1.1.1l-1ubuntu13.0.0-1ubuntu13.0.1-0ubuntu13.0.2-0ubuntu13.0.2-0ubuntu1.1
Show 21 moreShow less
3.0.2-0ubuntu1.23.0.2-0ubuntu1.43.0.2-0ubuntu1.53.0.2-0ubuntu1.63.0.2-0ubuntu1.73.0.2-0ubuntu1.83.0.2-0ubuntu1.93.0.2-0ubuntu1.103.0.2-0ubuntu1.123.0.2-0ubuntu1.133.0.2-0ubuntu1.143.0.2-0ubuntu1.153.0.2-0ubuntu1.163.0.2-0ubuntu1.173.0.2-0ubuntu1.183.0.2-0ubuntu1.193.0.2-0ubuntu1.203.0.2-0ubuntu1.213.0.2-0ubuntu1.233.0.2-0ubuntu1.253.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
openssl
Ubuntu:24.04:LTS
From an advisory covering 10 CVEs
 before 3.0.13-0ubuntu3.15, plus listed versions
3.0.10-1ubuntu23.0.10-1ubuntu2.13.0.10-1ubuntu33.0.10-1ubuntu43.0.13-0ubuntu2
Show 11 moreShow less
3.0.13-0ubuntu33.0.13-0ubuntu3.13.0.13-0ubuntu3.23.0.13-0ubuntu3.33.0.13-0ubuntu3.43.0.13-0ubuntu3.53.0.13-0ubuntu3.63.0.13-0ubuntu3.73.0.13-0ubuntu3.93.0.13-0ubuntu3.113.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
openssl
Ubuntu:26.04:LTS
From an advisory covering 10 CVEs
 before 3.5.5-1ubuntu3.4, plus listed versions
3.5.3-1ubuntu23.5.5-1ubuntu13.5.5-1ubuntu33.5.5-1ubuntu3.23.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
openssl-3
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 3.5.3-8.1
3.5.3-8.1
openssl-3
openSUSE:Leap 16.0
From an advisory covering 11 CVEs
 before 3.5.0-160000.10.1
3.5.0-160000.10.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-63073 is a critical vulnerability (CVSS 9.8) in Openssl, published August 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.16%, the 67th percentile. Fixed in openssl 3.3.7-r1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 6 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open