Threats Tagged 'oesa-2026-4419'

Multiple vulnerabilities have been identified in OpenSSL affecting TLS/SSL and QUIC implementations. These include excessive memory allocation from crafted certificates causing potential denial of service, QUIC server amplification attacks due to address validation bypass, CPU exhaustion from inefficient QUIC stream reassembly, and timing side-channel leakage in elliptic-curve scalar multiplication. The vulnerabilities can lead to denial of service or private key exposure under specific conditions. A security update addressing these issues is available.