{"id":"CVE-2026-14456","aliases":["ALPINE-CVE-2026-14456","ALSA-2026:67154","ALSA-2026:67165","BELL-CVE-2026-14456","DEBIAN-CVE-2026-14456","EUVD-2026-57919","GHSA-9x89-v382-mjh7","MGASA-2026-0353","OESA-2026-3579","RHSA-2026:56097","RHSA-2026:67154","RHSA-2026:67165","RLSA-2026:67154","RLSA-2026:67165","ROOT-OS-ALPINE-323-CVE-2026-14456","ROOT-OS-ALPINE-324-CVE-2026-14456","ROOT-OS-DEBIAN-11-CVE-2026-14456","ROOT-OS-DEBIAN-12-CVE-2026-14456","ROOT-OS-DEBIAN-13-CVE-2026-14456","SUSE-SU-2026:23463-1","SUSE-SU-2026:23609-1","SUSE-SU-2026:4039-1","UBUNTU-CVE-2026-14456","USN-8678-1","openSUSE-SU-2026:11623-1","openSUSE-SU-2026:21744-1"],"status":"published","title":"Unbounded Memory Growth in QUIC Server Incoming Channel Queue","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00729,"percentile":0.5473,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2026-08-13T13:55:52Z","modified":"2026-11-07T10:01:04Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openssl","fixed_in":["3.5.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["3.5.7-1~deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["3.6.4-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"openssl","fixed_in":["3.5.6-5.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"openssl","fixed_in":["1.1.1w-0+deb11u8.aikido.4","1.1.1w-0+deb11u8.aikido.5","1.1.1w-0+deb11u8.aikido.6","1.1.1w-0+deb11u8.aikido.7","1.1.1w-0+deb11u8.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-openssl","fixed_in":["1.1.1w-0+deb11u8.aikido.4","1.1.1w-0+deb11u8.aikido.5","1.1.1w-0+deb11u8.aikido.6","1.1.1w-0+deb11u8.aikido.7","1.1.1w-0+deb11u8.aikido.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openssl","fixed_in":["3.5.5-1ubuntu3.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":10},{"source":"osv","ecosystem":"Alpaquita:25","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0-r0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0-r0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0-r0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.0-r0"},{"fixed":"3.5.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.7-1~deb13u2"}]}],"versions":["3.5.1-1","3.5.1-1+deb13u1","3.5.2-1","3.5.3-1","3.5.4-1","3.5.4-1~deb13u1","3.5.4-1~deb13u2","3.5.5-1","3.5.5-1~deb13u1","3.5.5-1~deb13u2","3.5.6-1~deb13u1","3.5.6-1~deb13u2","3.5.7-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-1"}]}],"versions":["3.5.1-1","3.5.2-1","3.5.3-1","3.5.4-1","3.5.4-1~deb13u1","3.5.4-1~deb13u2","3.5.5-1","3.5.5-1~deb13u1","3.5.5-1~deb13u2","3.5.6-1~deb13u1","3.5.6-1~deb13u2","3.5.7-1~deb13u1","3.5.7-1~deb13u2","3.5.7-1~deb13u3","3.5.9-1~deb13u1","3.6.0-1","3.6.0-2","3.6.0~~alpha1-1","3.6.0~~beta1-1","3.6.1-1","3.6.1-2","3.6.1-3","3.6.2-1","3.6.3-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.8-1.mga10"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.22-1.mga9"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.6-5.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl-config-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl-devel-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl-fips-provider-upstream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.6-0.5.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:10","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.8-1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"Root:Debian:11","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-0+deb11u8.aikido.4"},{"fixed":"1.1.1w-0+deb11u8.aikido.5"},{"fixed":"1.1.1w-0+deb11u8.aikido.6"},{"fixed":"1.1.1w-0+deb11u8.aikido.7"},{"fixed":"1.1.1w-0+deb11u8.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1w-0+deb11u8.aikido.4"},{"fixed":"1.1.1w-0+deb11u8.aikido.5"},{"fixed":"1.1.1w-0+deb11u8.aikido.6"},{"fixed":"1.1.1w-0+deb11u8.aikido.7"},{"fixed":"1.1.1w-0+deb11u8.aikido.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-160000.10.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-160000.10.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-160000.10.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-150700.5.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.25~dfsg2-2ubuntu1","4.2.2~dfsg-1","4.2.3~dfsg-1","4.2.4~dfsg-1ubuntu1","4.2.4~dfsg-2","4.2.6~dfsg-1ubuntu1","4.2.6~dfsg-1ubuntu4","4.2.6~dfsg-1ubuntu4.1","4.2.6~dfsg-1ubuntu4.2","4.2.6~dfsg-1ubuntu4.2+esm1","4.2.6~dfsg-1ubuntu4.2+esm2","4.2.6~dfsg-1ubuntu4.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.11.4~dfsg-1ubuntu1","6.11.4~dfsg-1ubuntu2","6.12.0~dfsg-1ubuntu1","6.12.0~dfsg-2ubuntu1","6.12.0~dfsg-2ubuntu2","8.10.0~dfsg-2","8.10.0~dfsg-2ubuntu0.2","8.10.0~dfsg-2ubuntu0.3","8.10.0~dfsg-2ubuntu0.4","8.10.0~dfsg-2ubuntu0.4+esm1","8.10.0~dfsg-2ubuntu0.4+esm2","8.10.0~dfsg-2ubuntu0.4+esm3","8.10.0~dfsg-2ubuntu0.4+esm4","8.10.0~dfsg-2ubuntu0.4+esm5","8.10.0~dfsg-2ubuntu0.4+esm6"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2025.11-3ubuntu7","2025.11-3ubuntu8","2026.05-2ubuntu1","2026.05-2ubuntu2","2026.05-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"edk2-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2025.11-3ubuntu8","2025.11-3ubuntu9","2026.05-2ubuntu1","2026.05-2ubuntu2","2026.05-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2025.02-8ubuntu3","2025.11-3ubuntu6","2025.11-3ubuntu7","2025.11-3ubuntu7.2","2025.11-3ubuntu7.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"edk2-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2025.11-3ubuntu6","2025.11-3ubuntu8","2025.11-3ubuntu8.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.5-1ubuntu3.4"}]}],"versions":["3.5.3-1ubuntu2","3.5.5-1ubuntu1","3.5.5-1ubuntu3","3.5.5-1ubuntu3.2","3.5.5-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-0ubuntu1.29"}]}],"versions":["1.1.1l-1ubuntu1","3.0.0-1ubuntu1","3.0.1-0ubuntu1","3.0.2-0ubuntu1","3.0.2-0ubuntu1.1","3.0.2-0ubuntu1.2","3.0.2-0ubuntu1.4","3.0.2-0ubuntu1.5","3.0.2-0ubuntu1.6","3.0.2-0ubuntu1.7","3.0.2-0ubuntu1.8","3.0.2-0ubuntu1.9","3.0.2-0ubuntu1.10","3.0.2-0ubuntu1.12","3.0.2-0ubuntu1.13","3.0.2-0ubuntu1.14","3.0.2-0ubuntu1.15","3.0.2-0ubuntu1.16","3.0.2-0ubuntu1.17","3.0.2-0ubuntu1.18","3.0.2-0ubuntu1.19","3.0.2-0ubuntu1.20","3.0.2-0ubuntu1.21","3.0.2-0ubuntu1.23","3.0.2-0ubuntu1.25","3.0.2-0ubuntu1.26"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-0ubuntu3.15"}]}],"versions":["3.0.10-1ubuntu2","3.0.10-1ubuntu2.1","3.0.10-1ubuntu3","3.0.10-1ubuntu4","3.0.13-0ubuntu2","3.0.13-0ubuntu3","3.0.13-0ubuntu3.1","3.0.13-0ubuntu3.2","3.0.13-0ubuntu3.3","3.0.13-0ubuntu3.4","3.0.13-0ubuntu3.5","3.0.13-0ubuntu3.6","3.0.13-0ubuntu3.7","3.0.13-0ubuntu3.9","3.0.13-0ubuntu3.11","3.0.13-0ubuntu3.12"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.5-1ubuntu3.4"}]}],"versions":["3.5.3-1ubuntu2","3.5.5-1ubuntu1","3.5.5-1ubuntu3","3.5.5-1ubuntu3.2","3.5.5-1ubuntu3.3"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-8.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"openssl-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-160000.10.1"}]}],"bundled":11}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"https://openssl-library.org/news/secadv/20260813.txt","tags":["vendor-advisory","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139","tags":["patch","Patch","fix","article"]},{"url":"https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b","tags":["patch","Patch","fix","article"]},{"url":"https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9","tags":["patch","Patch","fix","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/08/13/4","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14456","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9x89-v382-mjh7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-14456","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-14456","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-14457","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18798","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54874","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63072","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63073","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63074","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63075","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63076","tags":["report"]},{"url":"https://bugzilla.redhat.com/2515348","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517559","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517560","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517561","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517562","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517564","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517565","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517566","tags":["report"]},{"url":"https://bugzilla.redhat.com/2517570","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-67154.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67165","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-67165.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-75803.html","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-14456","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/14xxx/CVE-2026-14456.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-14456","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0353.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36139","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/13/4","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/25/3","tags":["web"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","tags":["web","article"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00376.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3579","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56097","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54876","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56097.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14456","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54876","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54876","tags":["advisory"]},{"url":"https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12","tags":["article"]},{"url":"https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638","tags":["article"]},{"url":"https://openssl-library.org/news/secadv/20260805.txt","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517570","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-212362","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67154.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14457","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14457","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18798","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54874","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63073","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63074","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63075","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63075","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63076","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-232828","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67165.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:67154","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:67165","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623463-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1266343","tags":["report"]},{"url":"https://bugzilla.suse.com/1274774","tags":["report"]},{"url":"https://bugzilla.suse.com/1274777","tags":["report"]},{"url":"https://bugzilla.suse.com/1274788","tags":["report"]},{"url":"https://bugzilla.suse.com/1274790","tags":["report"]},{"url":"https://bugzilla.suse.com/1274791","tags":["report"]},{"url":"https://bugzilla.suse.com/1274792","tags":["report"]},{"url":"https://bugzilla.suse.com/1274795","tags":["report"]},{"url":"https://bugzilla.suse.com/1274796","tags":["report"]},{"url":"https://bugzilla.suse.com/1274797","tags":["report"]},{"url":"https://bugzilla.suse.com/1274798","tags":["report"]},{"url":"https://bugzilla.suse.com/1275837","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-75803","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623609-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264039-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-14456","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8678-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-14457","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-18798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-54874","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-75803","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-14456","title":"Unbounded Memory Growth in QUIC Server Incoming Channel Queue","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T13:55:52.37Z","modified":"2026-08-13T17:41:29.42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T13:38:32.13011Z"}],"euvd":[{"id":"EUVD-2026-57919","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T13:55:52Z","modified":"2026-08-13T17:41:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:55.61982Z"}],"ghsa":[{"id":"GHSA-9x89-v382-mjh7","title":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial...","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T15:34:42Z","modified":"2026-08-13T18:31:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:10:25.845105Z"}],"nvd":[{"id":"CVE-2026-14456","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T15:19:31.82Z","modified":"2026-11-06T20:26:36.04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-06T22:02:13.276002Z"}],"osv":[{"id":"ALPINE-CVE-2026-14456","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T15:19:31.82Z","modified":"2026-11-07T09:30:02.839279083Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-07T09:42:35.936113Z"},{"id":"BELL-CVE-2026-14456","status":"published","published":"2026-08-18T06:06:07.998382Z","modified":"2026-08-28T07:15:04.337904492Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-14456","title":"Unbounded Memory Growth in QUIC Server Incoming Channel Queue","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T13:55:52.37Z","modified":"2026-11-11T13:28:59.922091467Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-08T02:57:14.556074Z"},{"id":"DEBIAN-CVE-2026-14456","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.  Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service.  CWE: CWE-770: Allocation of Resources Without Limits or Throttling  Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests.  The issue is present since OpenSSL 3.5 when the QUIC server implementation was added.  The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl).  FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T15:19:31.82Z","modified":"2026-11-07T10:01:04.339437001Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-07T10:14:19.880839Z"},{"id":"OESA-2026-3579","title":"openssl security update","description":"OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.\r\n\r\nSecurity Fix(es):\n\nIssue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.(CVE-2026-14456)","status":"published","published":"2026-08-30T04:18:29Z","modified":"2026-08-30T04:32:17.195341607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:56097","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-08-19T10:22:53Z","modified":"2026-10-16T10:20:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:67154","title":"Red Hat Security Advisory: openssl security, bug fix, and enhancement update","status":"published","published":"2026-09-14T10:10:19Z","modified":"2026-10-20T10:13:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67165","title":"Red Hat Security Advisory: openssl security, bug fix, and enhancement update","status":"published","published":"2026-09-14T10:10:23Z","modified":"2026-10-20T10:13:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:67154","title":"Important: openssl security, bug fix, and enhancement update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)\n\n* openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)\n\n* openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)\n\n* openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)\n\n* openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)\n\n* openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)\n\n* openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)\n\n* openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)\n\n* openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)\n\nBug Fix(es) and Enhancement(s):\n\n* openssl: HollowByte remote memory-exhaustion DoS fix may be missing [Rocky Linux 10.2.z] (JIRA:Rocky Linux-212362)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-15T12:08:56.876794Z","modified":"2026-09-15T12:30:03.316187917Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:67165","title":"Important: openssl security, bug fix, and enhancement update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)\n\n* openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)\n\n* openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)\n\n* openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)\n\n* openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)\n\n* openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)\n\n* openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)\n\n* openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)\n\n* openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)\n\nBug Fix(es) and Enhancement(s):\n\n* openssl: HollowByte remote memory-exhaustion DoS fix may be missing [Rocky Linux 9.8.z] (JIRA:Rocky Linux-232828)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-15T18:05:37.908911Z","modified":"2026-09-15T18:30:36.357804882Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-14456","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the server listener faster than the application accepts connections, can cause the memory allocated to store the per-channel state to grow without any limits, potentially making the QUIC listener unavailable and causing Denial of Service. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The function that handles inbound QUIC packets uses Connection-Id from the packet header to find an existing connection (QUIC channel). If no existing connection is found and the packet type is INITIAL, the function treats the packet as a new connection. It allocates a new channel object and inserts it into a queue where it waits to be accepted by the local application with SSL_accept(3ossl). The memory occupied by these initial channel objects may grow without bounds if the application is not able to call SSL_accept() frequently enough to serve these inbound connection requests. The issue is present since OpenSSL 3.5 when the QUIC server implementation was added. The fix introduces a limit for pending connections. The default limit is set to 256 pending connections (waiting to be accepted by the local application). Applications may change the default by calling SSL_set_value_uint(3ossl). FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary.","status":"published","published":"2026-08-13T15:19:00Z","modified":"2026-10-17T12:58:05.666408219Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"ALSA-2026:67154","title":"Important: openssl security, bug fix, and enhancement update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  \n\nSecurity Fix(es):  \n\n  * openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)\n  * openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)\n  * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)\n  * openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)\n  * openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)\n  * openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)\n  * openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)\n  * openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)\n  * openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 10.2.z] (JIRA:AlmaLinux-212362)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-10-29T11:30:43.111044556Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:67165","title":"Important: openssl security, bug fix, and enhancement update","description":"OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.  \n\nSecurity Fix(es):  \n\n  * openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server (CVE-2026-14456)\n  * openssl: QUIC server may trigger double free when processing INITIAL packet (CVE-2026-18798)\n  * openssl: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)\n  * openssl: invalid pointer dereference in CMP server via crafted protectionAlg (CVE-2026-63076)\n  * openssl: RPK server signature algorithm selection can dereference a missing certificate (CVE-2026-14457)\n  * openssl: excessive memory use buffering DTLS records for a future epoch (CVE-2026-54874)\n  * openssl: untrusted sender DN used as format string in CMP response validation (CVE-2026-63073)\n  * openssl: CMP indefinite cache growth of ExtraCerts (CVE-2026-63074)\n  * openssl: QUIC ACK-only packet retention can cause memory exhaustion (CVE-2026-63075)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * openssl: HollowByte remote memory-exhaustion DoS fix may be missing [AlmaLinux 9.8.z] (JIRA:AlmaLinux-232828)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-10-29T11:42:20.862114128Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"MGASA-2026-0353","title":"Updated openssl packages fix security vulnerabilities","description":"Unbounded Memory Growth in QUIC Server Incoming Channel Queue.\n(CVE-2026-14456)\nQUIC Server May Trigger Double Free When Processing INITIAL Packet.\n(CVE-2026-18798)\nHeap Buffer Overflow in CMS Key Unwrapping. (CVE-2026-63072)\nInvalid Pointer Dereference in CMP Server via Crafted protectionAlg.\n(CVE-2026-63076)\nRPK Server Signature Algorithm Selection Can Dereference a Missing\nCertificate. (CVE-2026-14457)\nExcessive Memory Use Buffering DTLS Records for a Future Epoch.\n(CVE-2026-54874)\nUntrusted Sender DN Used as Format String in CMP Response Validation.\n(CVE-2026-63073)\nCMP Indefinite Cache Growth of ExtraCerts. (CVE-2026-63074)\nQUIC ACK-only Packet Retention Can Cause Memory Exhaustion.\n(CVE-2026-63075)\n","status":"published","published":"2026-08-31T19:40:26Z","modified":"2026-08-31T19:56:27.732690321Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11623-1","title":"libopenssl-3-devel-3.5.3-8.1 on GA media","description":"These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-27T00:00:00Z","modified":"2026-08-28T18:23:08.790866431Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21744-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\nAugust 2026 release.\n\n- CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).\n- CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).\n- CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).\n- CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).\n- CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).\n- CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).\n- CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).\n- CVE-2026-63074: CMP indefinite cache growth of `ExtraCerts` (bsc#1274797).\n- CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).\n- CVE-2026-63076: invalid pointer dereference in CMP server via crafted `protectionAlg` (bsc#1274790).\n- CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837).\n","status":"published","published":"2026-09-02T15:55:21Z","modified":"2026-09-09T18:23:13.577661775Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-OS-ALPINE-323-CVE-2026-14456","title":"CVE-2026-14456 in openssl - Patched by Root","description":"Root has patched CVE-2026-14456 in the openssl package for Root:Alpine:3.23. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-31T10:39:24Z","modified":"2026-09-29T20:00:04.959343693Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-ALPINE-324-CVE-2026-14456","title":"CVE-2026-14456 in openssl - Patched by Root","description":"Root has patched CVE-2026-14456 in the openssl package for Root:Alpine:3.24. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-28T08:46:27Z","modified":"2026-09-29T20:00:04.954124152Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-14456","title":"CVE-2026-14456 in openssl - Patched by Root","description":"Root has patched CVE-2026-14456 in the openssl package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-11T07:27:28Z","modified":"2026-09-11T08:15:07.913184861Z","updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-14456","title":"CVE-2026-14456 in openssl - Patched by Root","description":"Root has patched CVE-2026-14456 in the openssl package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-10-06T13:42:18Z","modified":"2026-10-09T13:00:12.513252493Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-14456","title":"CVE-2026-14456 in openssl - Patched by Root","description":"Root has patched CVE-2026-14456 in the openssl package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-24T16:31:29Z","modified":"2026-10-05T13:00:04.554530949Z","updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"SUSE-SU-2026:23463-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\nAugust 2026 release.\n\n- CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).\n- CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).\n- CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).\n- CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).\n- CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).\n- CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).\n- CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).\n- CVE-2026-63074: CMP indefinite cache growth of `ExtraCerts` (bsc#1274797).\n- CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).\n- CVE-2026-63076: invalid pointer dereference in CMP server via crafted `protectionAlg` (bsc#1274790).\n- CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837).\n","status":"published","published":"2026-09-02T15:59:12Z","modified":"2026-09-14T18:23:12.065783412Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23609-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\nAugust 2026 release.\n\n- CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).\n- CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).\n- CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).\n- CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).\n- CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795).\n- CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).\n- CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).\n- CVE-2026-63074: CMP indefinite cache growth of `ExtraCerts` (bsc#1274797).\n- CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).\n- CVE-2026-63076: invalid pointer dereference in CMP server via crafted `protectionAlg` (bsc#1274790).\n- CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837).\n","status":"published","published":"2026-09-02T15:59:12Z","modified":"2026-09-29T18:23:19.207612323Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4039-1","title":"Security update for openssl-3","description":"This update for openssl-3 fixes the following issues:\n\nAugust 2026 release.\n  \n- CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791).\n- CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1274792).\n- CVE-2026-18798: QUIC server may trigger double free when processing INITIAL packet (bsc#1274777).\n- CVE-2026-34181: PKCS#12 files with PBMAC1 are accepted with short HMAC keys (bsc#1266343).\n- CVE-2026-54874: excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795).\n- CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788).\n- CVE-2026-63073: untrusted sender DN used as format string in CMP response validation (bsc#1274796).\n- CVE-2026-63074: CMP indefinite cache growth of `ExtraCerts` (bsc#1274797).\n- CVE-2026-63075: QUIC ACK-only packet retention can cause memory exhaustion (bsc#1274798).\n- CVE-2026-63076: invalid pointer dereference in CMP server via crafted `protectionAlg` (bsc#1274790).\n- CVE-2026-75803: AEAD forgeries with empty ciphertext when using `EVP_Cipher()` (bsc#1275837).\n","status":"published","published":"2026-09-07T08:29:17Z","modified":"2026-09-13T18:23:17.356459762Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8678-1","title":"openssl vulnerabilities","description":"It was discovered that OpenSSL incorrectly handled the QUIC server incoming\nchannel queue. A remote attacker could possibly use this issue to cause\nOpenSSL to use excessive resources, leading to a denial of service. This\nissue only affected Ubuntu 26.04 LTS. (CVE-2026-14456)\n\nIt was discovered that OpenSSL incorrectly handled signature algorithm\nselection when using Raw Public Keys. A remote attacker could possibly use\nthis issue to cause OpenSSL to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 26.04 LTS. (CVE-2026-14457)\n\nIt was discovered that OpenSSL incorrectly handled QUIC INITIAL packet\nprocessing. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. This issue only\naffected Ubuntu 26.04 LTS. (CVE-2026-18798)\n\nIt was discovered that OpenSSL incorrectly handled buffering of DTLS\nrecords for a future epoch. A remote attacker could possibly use this issue\nto cause OpenSSL to use excessive resources, leading to a denial of\nservice. (CVE-2026-54874)\n\nIt was discovered that OpenSSL incorrectly handled CMS key unwrapping. A\nremote attacker could possibly use this issue to cause a heap buffer\noverflow, leading to a denial of service or arbitrary code execution.\n(CVE-2026-63072)\n\nIt was discovered that OpenSSL incorrectly validated the sender\ndistinguished name in CMP response messages. A remote attacker could\npossibly use this issue to cause OpenSSL to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-63073)\n\nIt was discovered that OpenSSL incorrectly limited the growth of an\ninternal certificate cache used during CMP operations. A remote attacker\ncould possibly use this issue to cause OpenSSL to use excessive resources,\nleading to a denial of service. (CVE-2026-63074)\n\nIt was discovered that OpenSSL incorrectly handled QUIC ACK-only packet\nretention. A remote attacker could possibly use this issue to cause OpenSSL\nto use excessive resources, leading to a denial of service. This issue only\naffected Ubuntu 26.04 LTS. (CVE-2026-63075)\n\nIt was discovered that OpenSSL incorrectly handled CMP protection algorithm\nvalidation. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2026-63076)\n\nIt was discovered that OpenSSL incorrectly verified authentication tags\nwhen using certain AEAD ciphers via the EVP_Cipher() interface. An attacker\ncould possibly use this issue to perform AEAD forgery attacks.\n(CVE-2026-75803)","status":"published","published":"2026-08-25T17:38:49Z","modified":"2026-09-03T16:02:11.85793424Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}