Every CVE Search/ Get API key

CVE-2026-14456

Unbounded Memory Growth in QUIC Server Incoming Channel Queue

7.5 HighFix available

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.73%Up 0.3 points since Aug 14, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Unbounded Memory Growth in QUIC Server Incoming Channel Queue

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
EUVDEUVD-2026-57919 7.5

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
EUVD-2026-57919
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-9x89-v382-mjh7 7.5

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial...

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
GHSA-9x89-v382-mjh7
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
NVD 7.5

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2026-14456 7.5

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
ALPINE-CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-14456 7.5
Record
BELL-CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 23 moreShow less
OSV 7.5

Unbounded Memory Growth in QUIC Server Incoming Channel Queue

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVDEBIAN-CVE-2026-14456 7.5

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests. The issue is present since OpenSSL 3.5 when the QUIC server implementation was added. The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl). FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
DEBIAN-CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-3579 7.5

openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Security Fix(es):

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.

CWE: CWE-770: Allocation of Resources Without Limits or Throttling

Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.

The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.

The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).

FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.(CVE-2026-14456)

Record
OESA-2026-3579
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:56097 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:56097
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:67154 7.5

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Record
RHSA-2026:67154
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:67165 7.5

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Record
RHSA-2026:67165
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:67154 7.5

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)

  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)

  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)

  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)

  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)

  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)

  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)

  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)

  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [Rocky Linux 10.2.z] (JIRA:Rocky Linux-212362)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67154
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:67165 7.5

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)

  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)

  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)

  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)

  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)

  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)

  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)

  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)

  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [Rocky Linux 9.8.z] (JIRA:Rocky Linux-232828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67165
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-14456 7.5

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests. The issue is present since OpenSSL 3.5 when the QUIC server implementation was added. The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl). FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.

Record
UBUNTU-CVE-2026-14456
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:67154 No score

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)
  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)
  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)
  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)
  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)
  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)
  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)
  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)
  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 10.2.z] (JIRA:AlmaLinux-212362)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67154
Updated
2026-11-02
OSVALSA-2026:67165 No score

Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)
  • openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)
  • openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)
  • openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)
  • openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)
  • openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)
  • openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)
  • openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)
  • openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)

Bug Fix(es) and Enhancement(s):

  • openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 9.8.z] (JIRA:AlmaLinux-232828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67165
Updated
2026-11-02
OSVMGASA-2026-0353 No score

Updated openssl packages fix security vulnerabilities

Unbounded Memory Growth in QUIC Server Incoming Channel Queue. (CVE-2026-14456) QUIC Server May Trigger Double Free When Processing INITIAL Packet. (CVE-2026-18798) Heap Buffer Overflow in CMS Key Unwrapping. (CVE-2026-63072) Invalid Pointer Dereference in CMP Server via Crafted protectionAlg. (CVE-2026-63076) RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate. (CVE-2026-14457) Excessive Memory Use Buffering DTLS Records for a Future Epoch. (CVE-2026-54874) Untrusted Sender DN Used as Format String in CMP Response Validation. (CVE-2026-63073) CMP Indefinite Cache Growth of ExtraCerts. (CVE-2026-63074) QUIC ACK-only Packet Retention Can Cause Memory Exhaustion. (CVE-2026-63075)

Record
MGASA-2026-0353
Updated
2026-11-02
OSVopenSUSE-SU-2026:11623-1 No score

libopenssl-3-devel-3.5.3-8.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11623-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21744-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
openSUSE-SU-2026:21744-1
Updated
2026-11-02
OSVROOT-OS-ALPINE-323-CVE-2026-14456 No score

CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Alpine:3.23. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-323-CVE-2026-14456
Updated
2026-11-02
OSVROOT-OS-ALPINE-324-CVE-2026-14456 No score

CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Alpine:3.24. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-324-CVE-2026-14456
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-14456 No score

CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-14456
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-14456 No score

CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-14456
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-14456 No score

CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-14456
Updated
2026-11-02
OSVSUSE-SU-2026:23463-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
SUSE-SU-2026:23463-1
Updated
2026-11-02
OSVSUSE-SU-2026:23609-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
SUSE-SU-2026:23609-1
Updated
2026-11-02
OSVSUSE-SU-2026:4039-1 No score

Security update for openssl-3

This update for openssl-3 fixes the following issues:

August 2026 release.

  • CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).
  • CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).
  • CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).
  • CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).
  • CVE-2026-54874: excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795).
  • CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).
  • CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).
  • CVE-2026-63074: CMP indefinite cache growth of ExtraCerts (bsc#1274797).
  • CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).
  • CVE-2026-63076: invalid pointer dereference in CMP server via crafted protectionAlg (bsc#1274790).
  • CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVP_Cipher() (bsc#1275837).
Record
SUSE-SU-2026:4039-1
Updated
2026-11-02
OSVUSN-8678-1 No score

openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-14456)

It was discovered that OpenSSL incorrectly handled signature algorithm selection when using Raw Public Keys. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-14457)

It was discovered that OpenSSL incorrectly handled QUIC INITIAL packet processing. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-18798)

It was discovered that OpenSSL incorrectly handled buffering of DTLS records for a future epoch. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. (CVE-2026-54874)

It was discovered that OpenSSL incorrectly handled CMS key unwrapping. A remote attacker could possibly use this issue to cause a heap buffer overflow, leading to a denial of service or arbitrary code execution. (CVE-2026-63072)

It was discovered that OpenSSL incorrectly validated the sender distinguished name in CMP response messages. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-63073)

It was discovered that OpenSSL incorrectly limited the growth of an internal certificate cache used during CMP operations. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. (CVE-2026-63074)

It was discovered that OpenSSL incorrectly handled QUIC ACK-only packet retention. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-63075)

It was discovered that OpenSSL incorrectly handled CMP protection algorithm validation. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-63076)

It was discovered that OpenSSL incorrectly verified authentication tags when using certain AEAD ciphers via the EVP_Cipher() interface. An attacker could possibly use this issue to perform AEAD forgery attacks. (CVE-2026-75803)

Record
USN-8678-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
Alpine:v3.22
 before 3.5.8-r0
3.5.8-r0
openssl
Alpine:v3.23
 before 3.5.8-r0
3.5.8-r0
openssl
Alpine:v3.24
 before 3.5.8-r0
3.5.8-r0
openssl
AlmaLinux:10
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl-devel
AlmaLinux:10
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl-libs
AlmaLinux:10
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl-perl
AlmaLinux:10
 before 1:3.5.8-1.el10_2.alma.1
1:3.5.8-1.el10_2.alma.1
openssl
AlmaLinux:9
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-devel
AlmaLinux:9
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs
AlmaLinux:9
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
Show 53 moreShow less
Affected packages
PackageAffectedFixed
openssl-perl
AlmaLinux:9
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Alpaquita:25
 3.5.0-r0 up to 3.5.8-r0
3.5.8-r0
openssl
Alpaquita:stream
 3.5.0-r0 up to 3.5.8-r0
3.5.8-r0
openssl
BellSoft Hardened Containers:25
 3.5.0-r0 up to 3.5.8-r0
3.5.8-r0
openssl
BellSoft Hardened Containers:stream
 3.5.0-r0 up to 3.5.8-r0
3.5.8-r0
openssl
Debian:13
 before 3.5.7-1~deb13u2, plus listed versions
3.5.1-13.5.1-1+deb13u13.5.2-13.5.3-13.5.4-1
Show 8 moreShow less
3.5.4-1~deb13u13.5.4-1~deb13u23.5.5-13.5.5-1~deb13u13.5.5-1~deb13u23.5.6-1~deb13u13.5.6-1~deb13u23.5.7-1~deb13u1
3.5.7-1~deb13u2
openssl
Debian:14
 before 3.6.4-1, plus listed versions
3.5.1-13.5.2-13.5.3-13.5.4-13.5.4-1~deb13u1
Show 18 moreShow less
3.5.4-1~deb13u23.5.5-13.5.5-1~deb13u13.5.5-1~deb13u23.5.6-1~deb13u13.5.6-1~deb13u23.5.7-1~deb13u13.5.7-1~deb13u23.5.7-1~deb13u33.6.0-13.6.0-23.6.0~~alpha1-13.6.0~~beta1-13.6.1-13.6.1-23.6.1-33.6.2-13.6.3-1
3.6.4-1
openssl
Mageia:10
 before 3.5.8-1.mga10
3.5.8-1.mga10
openssl
Mageia:9
 before 3.0.22-1.mga9
3.0.22-1.mga9
openssl
openEuler:24.03-LTS-SP4
 before 3.5.6-5.oe2403sp4
3.5.6-5.oe2403sp4
openssl
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-config-fips
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-devel
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-devel-engine
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-fips-provider-upstream
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-libs
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-perl
Red Hat:hummingbird:1
 before 0:3.5.6-0.5.hum1
0:3.5.6-0.5.hum1
openssl-debuginfo
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-debugsource
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-devel
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-libs-debuginfo
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-perl
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-libs
Red Hat:enterprise_linux:10.2
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-devel
Red Hat:enterprise_linux:9::appstream
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-perl
Red Hat:enterprise_linux:9::appstream
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Red Hat:enterprise_linux:9::baseos
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-debugsource
Red Hat:enterprise_linux:9::baseos
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs
Red Hat:enterprise_linux:9::baseos
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Rocky Linux:10
 before 1:3.5.8-1.el10_2
1:3.5.8-1.el10_2
openssl
Rocky Linux:9
 before 1:3.5.8-1.el9_8
1:3.5.8-1.el9_8
openssl
Root:Debian:11
 before 1.1.1w-0+deb11u8.aikido.4
1.1.1w-0+deb11u8.aikido.41.1.1w-0+deb11u8.aikido.51.1.1w-0+deb11u8.aikido.61.1.1w-0+deb11u8.aikido.71.1.1w-0+deb11u8.aikido.8
rootio-openssl
Root:Debian:11
 before 1.1.1w-0+deb11u8.aikido.4
1.1.1w-0+deb11u8.aikido.41.1.1w-0+deb11u8.aikido.51.1.1w-0+deb11u8.aikido.61.1.1w-0+deb11u8.aikido.71.1.1w-0+deb11u8.aikido.8
openssl-3
SUSE:Linux Micro 6.2
 before 3.5.0-160000.10.1
3.5.0-160000.10.1
openssl-3
SUSE:Linux Enterprise Server 16.0
 before 3.5.0-160000.10.1
3.5.0-160000.10.1
openssl-3
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 3.5.0-160000.10.1
3.5.0-160000.10.1
openssl-3
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 3.5.0-150700.5.50.1
3.5.0-150700.5.50.1
nodejs
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.10.25~dfsg2-2ubuntu14.2.2~dfsg-14.2.3~dfsg-14.2.4~dfsg-1ubuntu14.2.4~dfsg-2
Show 7 moreShow less
4.2.6~dfsg-1ubuntu14.2.6~dfsg-1ubuntu44.2.6~dfsg-1ubuntu4.14.2.6~dfsg-1ubuntu4.24.2.6~dfsg-1ubuntu4.2+esm14.2.6~dfsg-1ubuntu4.2+esm24.2.6~dfsg-1ubuntu4.2+esm3
 None known
nodejs
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
6.11.4~dfsg-1ubuntu16.11.4~dfsg-1ubuntu26.12.0~dfsg-1ubuntu16.12.0~dfsg-2ubuntu16.12.0~dfsg-2ubuntu2
Show 10 moreShow less
8.10.0~dfsg-28.10.0~dfsg-2ubuntu0.28.10.0~dfsg-2ubuntu0.38.10.0~dfsg-2ubuntu0.48.10.0~dfsg-2ubuntu0.4+esm18.10.0~dfsg-2ubuntu0.4+esm28.10.0~dfsg-2ubuntu0.4+esm38.10.0~dfsg-2ubuntu0.4+esm48.10.0~dfsg-2ubuntu0.4+esm58.10.0~dfsg-2ubuntu0.4+esm6
 None known
edk2
Ubuntu:26.10
 All versions, plus listed versions
2025.11-3ubuntu72025.11-3ubuntu82026.05-2ubuntu12026.05-2ubuntu22026.05-2ubuntu3
 None known
edk2-hwe
Ubuntu:26.10
 All versions, plus listed versions
2025.11-3ubuntu82025.11-3ubuntu92026.05-2ubuntu12026.05-2ubuntu22026.05-2ubuntu3
 None known
edk2
Ubuntu:26.04:LTS
 All versions, plus listed versions
2025.02-8ubuntu32025.11-3ubuntu62025.11-3ubuntu72025.11-3ubuntu7.22025.11-3ubuntu7.3
 None known
edk2-hwe
Ubuntu:26.04:LTS
 All versions, plus listed versions
2025.11-3ubuntu62025.11-3ubuntu82025.11-3ubuntu8.2
 None known
openssl
Ubuntu:26.04:LTS
 before 3.5.5-1ubuntu3.4, plus listed versions
3.5.3-1ubuntu23.5.5-1ubuntu13.5.5-1ubuntu33.5.5-1ubuntu3.23.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
openssl
Ubuntu:22.04:LTS
 before 3.0.2-0ubuntu1.29, plus listed versions
1.1.1l-1ubuntu13.0.0-1ubuntu13.0.1-0ubuntu13.0.2-0ubuntu13.0.2-0ubuntu1.1
Show 21 moreShow less
3.0.2-0ubuntu1.23.0.2-0ubuntu1.43.0.2-0ubuntu1.53.0.2-0ubuntu1.63.0.2-0ubuntu1.73.0.2-0ubuntu1.83.0.2-0ubuntu1.93.0.2-0ubuntu1.103.0.2-0ubuntu1.123.0.2-0ubuntu1.133.0.2-0ubuntu1.143.0.2-0ubuntu1.153.0.2-0ubuntu1.163.0.2-0ubuntu1.173.0.2-0ubuntu1.183.0.2-0ubuntu1.193.0.2-0ubuntu1.203.0.2-0ubuntu1.213.0.2-0ubuntu1.233.0.2-0ubuntu1.253.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
openssl
Ubuntu:24.04:LTS
 before 3.0.13-0ubuntu3.15, plus listed versions
3.0.10-1ubuntu23.0.10-1ubuntu2.13.0.10-1ubuntu33.0.10-1ubuntu43.0.13-0ubuntu2
Show 11 moreShow less
3.0.13-0ubuntu33.0.13-0ubuntu3.13.0.13-0ubuntu3.23.0.13-0ubuntu3.33.0.13-0ubuntu3.43.0.13-0ubuntu3.53.0.13-0ubuntu3.63.0.13-0ubuntu3.73.0.13-0ubuntu3.93.0.13-0ubuntu3.113.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
openssl-3
openSUSE:Tumbleweed
 before 3.5.3-8.1
3.5.3-8.1
openssl-3
openSUSE:Leap 16.0
 before 3.5.0-160000.10.1
3.5.0-160000.10.1

History

History
RecordedChangedSources
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-14456 is a high vulnerability (CVSS 7.5) in Openssl, published August 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. Fixed in openssl 3.5.8-r0.

References

Show 114 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open