PatchSiren

OpenSSL CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL OpenSSL CVE published 2026-08-25

CVE-2026-75803

Applications using OpenSSL's EVP_Cipher() function with empty ciphertexts may incorrectly validate AEAD tags, potentially accepting forged messages. This issue affects OpenSSL versions 3.0.0 to 3.0.22, 3.4.0 to 3.4.7, 3.5.0 to 3.5.8, 3.6.0 to 3.6.4, and 4.0.0 to 4.0.2. The FIPS modules in OpenSSL 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected as the impacted algorithms are not FIPS-approved.

HIGH OpenSSL CVE published 2026-08-25

CVE-2026-63075

A remote peer can cause memory growth in OpenSSL by repeatedly sending ack-eliciting packets without acknowledging ACK-only responses, potentially leading to Denial of Service through memory exhaustion. This issue arises from the OpenSSL QUIC stack's handling of ACK-only packets and the potential for malicious peers to exploit this behavior. Defenders managing OpenSSL QUIC connections should assess exposu [truncated]

MEDIUM OpenSSL CVE published 2026-08-25

CVE-2026-63074

The OpenSSL Certificate Management Protocol (CMP) vulnerability allows for potential Denial of Service (DoS) attacks and Out-of-Memory (OOM) conditions due to unbounded cache growth. Defenders responsible for OpenSSL CMP servers, security teams managing OpenSSL deployments, and administrators of systems using affected OpenSSL versions should assess exposure and prioritize patching. The vulnerability was p [truncated]

CRITICAL OpenSSL CVE published 2026-08-25

CVE-2026-63073

OpenSSL CMP response validation vulnerability allows a malicious or intercepted CMP endpoint to crash a CMP client that enforces an expected sender or uses a pinned server certificate. The reliable consequence is a denial of service. This issue affects OpenSSL CMP clients using versions 3.4.0-3.4.7, 3.5.0-3.5.8, 3.6.0-3.6.4, and 4.0.0-4.0.2. Defenders should assess exposure and prioritize patching or comp [truncated]

HIGH OpenSSL CVE published 2026-08-25

CVE-2026-54874

OpenSSL DTLS memory amplification vulnerability. Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires, potentially leading to a Denial of Service. Defenders responsible for OpenSSL DTLS endpoints, particularly those using vulnerable versions, should assess exposure and prioritize patching. The vulnerability all [truncated]

HIGH OpenSSL CVE published 2026-08-25

CVE-2026-18798

A double free vulnerability in OpenSSL's QUIC server implementation can lead to a Denial of Service (DoS) condition. The vulnerability occurs when the QUIC server fails to create a channel for an initial packet, causing the QUIC record layer RX (QRX) object to be freed twice, resulting in heap corruption. This vulnerability can be induced with a relatively low effort by a malformed (non RFC 9000 compliant [truncated]

HIGH OpenSSL CVE published 2026-08-25

CVE-2026-14457

A NULL pointer dereference vulnerability exists in OpenSSL when using RFC7250 Raw Public Keys (RPKs) without a corresponding certificate. This issue can lead to a Denial of Service (DoS) due to an application abort. No data disclosure or remote command execution are possible. The vulnerability affects OpenSSL versions 3.4.0 to 3.4.7, 3.5.0 to 3.5.8, 3.6.0 to 3.6.4, and 4.0.0 to 4.0.2.

HIGH OpenSSL CVE published 2026-08-05

CVE-2026-54876

A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. This issue affects TLS clients that explicitly enable OCSP response checking verification flags. The vulnerability is caused by an affected function called during X.509 certificate chain verification. The function fails to free the OCS [truncated]

HIGH OpenSSL CVE published 2026-06-09

CVE-2026-9076

A high-severity vulnerability, CVE-2026-9076, was found in OpenSSL, a widely-used cryptographic library. The issue arises from a heap buffer over-read during the decryption of CMS (Cryptographic Message Syntax) data. An attacker can exploit this vulnerability by supplying malicious CMS data, potentially leading to a Denial of Service (DoS) attack. The vulnerability has a CVSS score of 7.5 and is considere [truncated]

HIGH OpenSSL CVE published 2026-06-09

CVE-2026-7383

A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. This issue impacts applications that call ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly or register a custom string type via ASN1_STRING_TABLE_add() with attacker-controlled input on the order of half a gigabyte or more.

HIGH OpenSSL CVE published 2026-04-07

CVE-2026-28386

Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. This out-of-bounds read may trigger a crash which leads to Denial of Service for an application if the input buffer ends at a memory page boundary and the following page is unmapped. The vulnerable code path is only reach [truncated]

MEDIUM OpenSSL CVE published 2025-09-30

CVE-2018-0739

CVE-2018-0739 is a medium-severity denial-of-service issue tied to excessive recursion in constructed ASN.1 parsing. In the supplied advisory corpus, the issue is associated with Festo Automation Suite and bundled CODESYS components, with mitigation centered on upgrading Festo Automation Suite to 2.8.0.138 or later and installing patched CODESYS releases from the official vendor source.

LOW OpenSSL CVE published 2025-08-12

CVE-2024-2511

CVE-2024-2511 affects certain OpenSSL TLSv1.3 server configurations, not clients. In the risky case, using the non-default SSL_OP_NO_TICKET option can leave the session cache in an incorrect state so it fails to flush as it fills, allowing unbounded memory growth and a denial of service. OpenSSL says the issue does not occur when early_data is configured with the default anti-replay protection, and that F [truncated]

MEDIUM OpenSSL CVE published 2025-04-07

CVE-2023-0286

CVE-2023-0286 affects ABB M2M Gateway ARM600 firmware 4.1.2 through 5.0.3 and ABB M2M Gateway SW 5.0.1 through 5.0.3. According to the CISA CSAF advisory, the issue can be triggered when CRL checking is enabled and may let an attacker pass arbitrary pointers to a memcmp call, potentially exposing memory contents or causing a denial of service. The supplied advisory classifies the issue as medium severity [truncated]

MEDIUM Openssl CVE published 2024-04-09

CVE-2024-0727

CVE-2024-0727 is a denial-of-service issue in OpenSSL's PKCS12 handling. A maliciously formatted PKCS12 file can trigger a NULL pointer dereference and crash the process that parses it. The issue matters most for applications that accept PKCS12 files from untrusted sources and call the affected OpenSSL APIs.

MEDIUM Openssl CVE published 2024-04-09

CVE-2023-6129

CVE-2023-6129 is a PowerPC-specific OpenSSL bug in the POLY1305 MAC implementation that can corrupt caller state on newer PowerPC processors supporting PowerISA 2.07 vector instructions. The issue was published by OpenSSL and NVD on 2024-01-09. OpenSSL described the issue as low severity, while NVD assigned a CVSS 3.1 score of 6.5 (medium). The most relevant exposure is on systems where OpenSSL’s ChaCha20 [truncated]

MEDIUM OpenSSL CVE published 2023-11-14

CVE-2023-3817

CVE-2023-3817 is a Denial of Service (DoS) vulnerability in OpenSSL's Diffie-Hellman (DH) parameter validation functions. The issue stems from the `DH_check()`, `DH_check_ex()`, and `EVP_PKEY_param_check()` functions performing computationally expensive checks when presented with DH keys or parameters containing an excessively large `q` parameter value. Following the remediation of CVE-2023-3446, it was d [truncated]

MEDIUM OpenSSL CVE published 2023-11-14

CVE-2023-2650

A low-severity denial-of-service vulnerability exists in Mitsubishi Electric ICONICS Suite and related products when the BACnet Secure Connect feature is enabled. The vulnerability stems from an integrated OpenSSL library that fails to limit resource allocation during certificate validation. A remote attacker can trigger temporary denial-of-service by sending a certificate containing a specially crafted A [truncated]

MEDIUM OpenSSL CVE published 2023-06-27

CVE-2022-4304

CVE-2022-4304 is a timing-based RSA decryption side channel. In the advisory corpus, CISA maps the issue to Hitachi Energy Relion 670/650/SAM600-IO series and states that an attacker who can send many trial decryptions may be able to recover plaintext, potentially enough to decrypt data from an observed TLS connection.

Known exploited OpenSSL CVE published 2022-05-04

CVE-2014-0160

CVE-2014-0160 is listed by CISA as a Known Exploited Vulnerability affecting OpenSSL and described as an information disclosure issue. Because it appears in the KEV catalog, defenders should treat it as actively exploited and prioritize remediation over routine patch queues. CISA's KEV entry states the required action is to apply updates per vendor instructions.