Multiple vulnerabilities have been identified in OpenSSL affecting TLS/SSL and QUIC implementations. These include excessive memory allocation from crafted certificates causing potential denial of service, QUIC server amplification attacks due to address validation bypass, CPU exhaustion from inefficient QUIC stream reassembly, and timing side-channel leakage in elliptic-curve scalar multiplication. The vulnerabilities can lead to denial of service or private key exposure under specific conditions. A security update addressing these issues is available.
Multiple security vulnerabilities were identified in OpenSSL and OpenSSL 1.0 on various Ubuntu LTS releases, including issues causing denial of service, heap buffer overflow, and potential arbitrary code execution. These vulnerabilities affect OpenSSL's handling of CMS key unwrapping, QUIC protocol processing, TLS handshake buffering, and other cryptographic operations. Fixes are available through official Ubuntu security updates.
A performance degradation vulnerability exists in Node.js's QUIC stream reassembly algorithm, where out-of-order packets cause progressively worse performance with quadratic complexity. This can be exploited by a remote QUIC peer to cause CPU resource exhaustion and potential denial of service with low bandwidth. The issue affects multiple specific Node.js versions and has a CVSS score of 5.3 (low severity). A patch is available.
A vulnerability in Node.js related to the QUIC protocol causes the process to retain memory for QUIC packet buffers longer than necessary. This issue can lead to increased memory usage and potential denial of service due to resource exhaustion. The vulnerability is identified as CVE-2026-54873 and affects multiple specific Node.js versions, including various Ubuntu package versions. A patch is available to address this issue.
Red Hat has released a security advisory for a bug fix and enhancement update to the Red Hat Hardened Images RPMs, specifically addressing the chunkah package version 0.7.0-1.1.hum1. This update addresses the vulnerability identified as CVE-2026-84782. The advisory does not provide detailed technical information about the vulnerability but classifies it as high severity. The update is available for affected versions including chunkah 0.7.0-1.1.hum1 on aarch64 and x86_64 architectures.
OpenSSL contains a vulnerability in its handling of undersized DTLS 1.2 AEAD records before authentication, which can cause a denial of service (DoS). This issue allows an attacker to terminate an established DTLS 1.2 association by sending a single unauthenticated datagram. The vulnerability affects multiple Ubuntu OpenSSL package versions and has a CVSS score of 5.3, indicating a low severity level.
Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE.
A timing side-channel vulnerability exists in OpenSSL's SM2 signature generation, where non-constant-time arithmetic on secret values may allow attackers to infer sensitive information. This issue affects multiple OpenSSL versions used in various Ubuntu LTS releases. The vulnerability has a low CVSS score of 3.7 and does not impact integrity or availability. Official patches are available from Ubuntu to address this issue.
A vulnerability in the OpenSSL QUIC stack used by Node.js allows a remote peer to bypass connection-level flow control for streams. This can lead to excessive memory allocation on the local system, potentially up to 100MB per connection instead of the intended 768 KiB. Exploitation requires specific conditions involving multiple streams and data patterns. The OpenSSL FIPS module is not affected as the QUIC implementation lies outside its boundary. The issue has a CVSS score of 5.3 (low severity) and affects multiple specific Node.js versions. A patch is available to address this vulnerability.
A vulnerability in OpenSSL's CMP client allows a NULL pointer dereference when requesting certificate revocation using a PKCS#10 CSR. This can cause the client to crash and result in a denial of service. The issue does not affect clients that identify certificates by certificate or issuer and serial number, and no FIPS modules are impacted. A patch is available to address this issue.
A timing and cache side-channel vulnerability affects SM2 private key operations on ARM64 and RISC-V platforms in certain OpenSSL versions used by Node.js. The scalar point multiplication implementation is not constant-time, which could allow attackers measuring timing or cache patterns during SM2 signing or decryption to gain information about secret scalars. This vulnerability impacts OpenSSL versions 4.0, 3.6, 3.5, and 3.4 but does not affect versions 3.0, 1.1.1, or 1.0.2. Fixes have been released in OpenSSL 4.0.3, 3.6.5, 3.5.9, and 3.4.8. The CVSS score is 3.7, indicating low severity.
A timing side-channel vulnerability exists in OpenSSL's generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations on non-NIST curves without dedicated constant-time implementations, such as brainpoolP384r1. This vulnerability can leak secret nonce information through timing variations, potentially allowing private key recovery after many signature observations. NIST curves with constant-time implementations are not affected. The vulnerability has a low severity score and does not impact FIPS modules. Fixes are available across multiple Ubuntu LTS releases.
A vulnerability in Node.js TLS server occurs when SSL_set_SSL_CTX() is called to switch a SSL_CTX during a handshake and the new context has more provider signature algorithms than the original. This can cause out-of-bounds memory access leading to a denial of service. The issue affects only non-default configurations where SSL_CTX is switched mid-handshake with differing signature algorithms. FIPS modules are not impacted. The severity is low due to limited exploitation scope and the need for specific application behavior.
A vulnerability in the Node.js OpenSSL QUIC stack allows a remote attacker to flood the local QUIC implementation with NEW_CONNECTION_ID frames by bypassing limits on connection IDs. This leads to excessive memory allocation (~400MB) due to improper handling of RETIRE_CONNECTION_ID frames, violating RFC 9000 requirements. The flaw affects multiple Node.js versions and has a CVSS score of 7.5. A patch is available to address this issue.
CVE-2026-63073 is a high-severity vulnerability in Node.js related to OpenSSL CMP response validation. The issue involves passing an unexpected response sender distinguished name directly as a format string, which corresponds to CWE-134 (Uncontrolled Format String). This vulnerability affects multiple specific Node.js versions, including various Ubuntu package versions. A patch is available to address this issue. The vulnerability has a CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.
A vulnerability in the Node.js QUIC server component could cause a double free condition when processing INITIAL packets, potentially leading to a denial of service. This issue affects specific Ubuntu package versions of Node.js and OpenSSL. The vulnerability has a CVSS score of 7.5, indicating a medium severity level. A patch is available from Ubuntu to address this issue.
OpenSSL versions including 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1, and 1.0.2 improperly handle DTLS records received for a future epoch during an ongoing handshake. This causes OpenSSL to buffer significantly more memory than the record size, allowing a remote attacker to cause a memory exhaustion denial of service by sending a small amount of crafted network traffic. The memory retained per connection is bounded, limiting the overall impact. Fixes are available for all affected versions.
A vulnerability in Node.js related to the OpenSSL Certificate Management Protocol (CMP) causes the caching of additional certificates (extraCerts) sent in a CMP message, but these certificates are never properly handled. This issue has a CVSS score of 5.9 and is classified as low severity. Multiple specific Node.js versions, primarily Ubuntu package versions, are affected. A patch is available to address this vulnerability.
A vulnerability in Node.js related to OpenSSL's processing of QUIC traffic can cause a denial of service when a peer repeatedly sends ack-eliciting packets without acknowledging ACK-only packets. This issue affects specific Node.js versions and has a CVSS score of 7.5, indicating a high impact on availability but no confidentiality or integrity impact. A patch is available to address this vulnerability.
A vulnerability in Node.js related to OpenSSL CMP password-based protection verification causes the check to only verify that the protectionAlg parameter is not NULL, without properly validating its ASN.1 structure. This issue is tracked as CVE-2026-63076 and affects multiple specific Node.js versions, primarily in Ubuntu packages. The vulnerability has a CVSS score of 7.5, indicating a medium severity with a potential impact on availability. A patch is available to address this issue.