Catalogo CVE

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce

[Catalogo CVE]

Gravità
High · CVSS 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 22, 2026

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopensslsid3.6.5-1fixed
Debianopensslforky3.6.5-1fixed
Debianopenssltrixie3.5.7-1~deb13u2vulnerable
Debianopenssltrixie-security3.5.7-1~deb13u3fixed
Debianopensslbookworm3.0.20-1~deb12u2vulnerable
Debianopensslbookworm-security3.0.22-1~deb12u1vulnerable
Ubuntuopensslnoble3.0.13-0ubuntu3.16fixed
Ubuntulibssl-devnoble3.0.13-0ubuntu3.16fixed
Ubuntulibssl-docnoble3.0.13-0ubuntu3.16fixed
Ubuntulibssl3t64noble3.0.13-0ubuntu3.16fixed
CpeopensslNot reported4.0.3fixed
Alpineopenssl3.213.3.7-r2fixed
Suseopenssl-3linux enterprise module for basesystem 15 sp73.5.0-150700.5.53.2fixed
Suseopenssl-3linux enterprise server 15 sp6-ltss3.1.4-150600.5.67.1fixed
Suseopenssl-3linux enterprise server for sap applications 15 sp63.1.4-150600.5.67.1fixed
Suseopenssl-3linux enterprise micro 5.33.0.8-150400.4.101.1fixed
Suseopenssl-3linux enterprise micro 5.43.0.8-150400.4.101.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp4-espos3.0.8-150400.4.101.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp4-ltss3.0.8-150400.4.101.1fixed
Suseopenssl-3linux enterprise server 15 sp4-ltss3.0.8-150400.4.101.1fixed
Suseopenssl-3linux enterprise server for sap applications 15 sp43.0.8-150400.4.101.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp5-espos3.0.8-150500.5.80.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp5-ltss3.0.8-150500.5.80.1fixed
Suseopenssl-3linux enterprise server 15 sp5-ltss3.0.8-150500.5.80.1fixed
Suseopenssl-3linux enterprise server for sap applications 15 sp53.0.8-150500.5.80.1fixed
Ubuntuopensslpro1.1.1c-1ubuntu4vulnerable
Ubuntuopensslpro1.1.1d-2ubuntu3vulnerable
Ubuntuopensslpro1.1.1d-2ubuntu6vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu1vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.1vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.2vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.3vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.4vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.5vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.8vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.9vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.10vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.11vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.12vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.13vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.15vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.16vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.17vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.18vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.19vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.20vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.21vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.22vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.23vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24+esm1vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24+esm2vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24+esm3vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24+esm4vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24+esm5vulnerable
Ubuntuopensslpro1.1.1f-1ubuntu2.24+esm6fixed
Ubuntuopenssl1.0pro1.0.2n-1ubuntu2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.6vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.7vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.8vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.9vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.10vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.11vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.12vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm6vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm7fixed
Ubuntuopenssl22.041.1.1l-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.0-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.1-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.2vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.4vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.5vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.6vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.7vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.8vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.9vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.10vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.12vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.13vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.14vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.15vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.16vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.17vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.18vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.19vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.20vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.21vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.23vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.25vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.26vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.29vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.30fixed
Ubuntuopenssl24.043.0.10-1ubuntu2vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu2.1vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu3vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.1vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.5vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.6vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.7vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.9vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.11vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.12vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.15vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.16fixed
Ubuntuopenssl26.043.5.3-1ubuntu2vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu1vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.2vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.3vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.4vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.5vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.6fixed
Ubuntuopensslpro3.0.2-0ubuntu1.10+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.12+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.14+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.15+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.16+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.17+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.18+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.19+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.20+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.21+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.23+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.25+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.26+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.29+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.30+Fips1vulnerable
Ubuntuedk2pro0~20190606.20d2e5a1-2ubuntu1vulnerable
Ubuntuedk2pro0~20190828.37eef910-3vulnerable
Ubuntuedk2pro0~20190828.37eef910-4vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-1ubuntu1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.3vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.4vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.5vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.6vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.6+esm1vulnerable
Ubuntunodejspro12.22.5~dfsg-5ubuntu1vulnerable
Ubuntunodejspro12.22.7~dfsg-2ubuntu1vulnerable
Ubuntunodejspro12.22.7~dfsg-2ubuntu3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu2vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.1vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.2vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.4vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.5vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.6vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.6+esm2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.6vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.7vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.8vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.9vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.10vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.11vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.12vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm6vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm7fixed
Ubuntuedk222.042021.08~rc0-2vulnerable
Ubuntuedk222.042021.08-3vulnerable
Ubuntuedk222.042021.11~rc1-1vulnerable
Ubuntuedk222.042021.11-1vulnerable
Ubuntuedk222.042021.11-2vulnerable
Ubuntuedk222.042022.02~rc1-1vulnerable
Ubuntuedk222.042022.02~rc1-1ubuntu1vulnerable
Ubuntuedk222.042022.02-1vulnerable
Ubuntuedk222.042022.02-2vulnerable
Ubuntuedk222.042022.02-3vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.1vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.2vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.3vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.4vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.5vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.6vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.7vulnerable
Ubuntuopenssl22.041.1.1l-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.0-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.1-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.2vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.4vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.5vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.6vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.7vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.8vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.9vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.10vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.12vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.13vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.14vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.15vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.16vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.17vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.18vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.19vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.20vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.21vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.23vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.25vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.26vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.29vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.30fixed
Ubuntuopenssl-fipspro3.0.13-0ubuntu3+Fips1vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3.6+Fips1vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3.12+Fips1vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3.15+Fips1vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3.15+Fips2vulnerable
Ubuntuedk224.042023.05-2vulnerable
Ubuntuedk224.042023.11-2vulnerable
Ubuntuedk224.042023.11-3vulnerable
Ubuntuedk224.042023.11-4vulnerable
Ubuntuedk224.042023.11-5vulnerable
Ubuntuedk224.042023.11-6vulnerable
Ubuntuedk224.042023.11-8vulnerable
Ubuntuedk224.042024.02-1vulnerable
Ubuntuedk224.042024.02-2vulnerable
Ubuntuedk224.042024.02-2ubuntu0.1vulnerable
Ubuntuedk224.042024.02-2ubuntu0.3vulnerable
Ubuntuedk224.042024.02-2ubuntu0.4vulnerable
Ubuntuedk224.042024.02-2ubuntu0.5vulnerable
Ubuntuedk224.042024.02-2ubuntu0.6vulnerable
Ubuntuedk224.042024.02-2ubuntu0.7vulnerable
Ubuntuedk224.042024.02-2ubuntu0.8vulnerable
Ubuntuedk224.042024.02-2ubuntu0.9vulnerable
Ubuntuedk224.042024.02-2ubuntu0.10vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu2vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu2.1vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu3vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.1vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.5vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.6vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.7vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.9vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.11vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.12vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.15vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.16fixed
Ubuntuedk226.102025.11-3ubuntu7vulnerable
Ubuntuedk226.102025.11-3ubuntu8vulnerable
Ubuntuedk226.102026.05-2ubuntu1vulnerable
Ubuntuedk226.102026.05-2ubuntu2vulnerable
Ubuntuedk226.102026.05-2ubuntu3vulnerable
Ubuntuedk2-hwe26.102025.11-3ubuntu8vulnerable
Ubuntuedk2-hwe26.102025.11-3ubuntu9vulnerable
Ubuntuedk2-hwe26.102026.05-2ubuntu1vulnerable
Ubuntuedk2-hwe26.102026.05-2ubuntu2vulnerable
Ubuntuedk2-hwe26.102026.05-2ubuntu3vulnerable
Ubuntuedk226.042025.02-8ubuntu3vulnerable
Ubuntuedk226.042025.11-3ubuntu6vulnerable
Ubuntuedk226.042025.11-3ubuntu7vulnerable
Ubuntuedk226.042025.11-3ubuntu7.2vulnerable
Ubuntuedk226.042025.11-3ubuntu7.3vulnerable
Ubuntuedk2-hwe26.042025.11-3ubuntu6vulnerable
Ubuntuedk2-hwe26.042025.11-3ubuntu8vulnerable
Ubuntuedk2-hwe26.042025.11-3ubuntu8.2vulnerable
Ubuntuopenssl26.043.5.3-1ubuntu2vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu1vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.2vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.3vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.4vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.5vulnerable
Ubuntuopenssl26.043.5.5-1ubuntu3.6fixed
Suseopenssl-3linux enterprise server 16.03.5.0-160000.11.1fixed
Suseopenssl-3linux enterprise server for sap applications 16.03.5.0-160000.11.1fixed
Suseopenssl-3linux micro 6.23.5.0-160000.11.1fixed
Opensuseopenssl-3leap 16.03.5.0-160000.11.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopensslsourcesid3.6.5-1not yet assignedNot reportedNot reported
Debianopensslsourceforky3.6.5-1not yet assignedNot reportedNot reported
Debianopensslsourcetrixie3.5.7-1~deb13u3not yet assignedNot reportedNot reported
Debianopensslsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntuopenssldebnoble3.0.13-0ubuntu3.16Not reportedNot reportedNot reported
Ubuntulibssl-devdebnoble3.0.13-0ubuntu3.16Not reportedNot reportedNot reported
Ubuntulibssl-docdebnoble3.0.13-0ubuntu3.16Not reportedNot reportedNot reported
Ubuntulibssl3t64debnoble3.0.13-0ubuntu3.16Not reportedNot reportedNot reported
CpeopensslcpeNot reported4.0.3Not reportedNVD-CVE-2026-35189Not reported
Alpineopensslapk3.213.3.7-r2Not reportedALPINE-CVE-2026-35189Not reported
Suseopenssl-3rpmlinux enterprise module for basesystem 15 sp73.5.0-150700.5.53.2Not reportedSUSE-SU-2026:4414-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp6-ltss3.1.4-150600.5.67.1Not reportedSUSE-SU-2026:4419-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 15 sp63.1.4-150600.5.67.1Not reportedSUSE-SU-2026:4419-1Not reported
Suseopenssl-3rpmlinux enterprise micro 5.33.0.8-150400.4.101.1Not reportedSUSE-SU-2026:4413-1Not reported
Suseopenssl-3rpmlinux enterprise micro 5.43.0.8-150400.4.101.1Not reportedSUSE-SU-2026:4413-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp4-espos3.0.8-150400.4.101.1Not reportedSUSE-SU-2026:4413-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp4-ltss3.0.8-150400.4.101.1Not reportedSUSE-SU-2026:4413-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp4-ltss3.0.8-150400.4.101.1Not reportedSUSE-SU-2026:4413-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 15 sp43.0.8-150400.4.101.1Not reportedSUSE-SU-2026:4413-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp5-espos3.0.8-150500.5.80.1Not reportedSUSE-SU-2026:4412-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp5-ltss3.0.8-150500.5.80.1Not reportedSUSE-SU-2026:4412-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp5-ltss3.0.8-150500.5.80.1Not reportedSUSE-SU-2026:4412-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 15 sp53.0.8-150500.5.80.1Not reportedSUSE-SU-2026:4412-1Not reported
Ubuntuopenssldebpro1.1.1f-1ubuntu2.24+esm6Not reportedUSN-8847-2Not reported
Ubuntuopenssl1.0debpro1.0.2n-1ubuntu5.13+esm7Not reportedUSN-8847-2Not reported
Ubuntuopenssldeb22.043.0.2-0ubuntu1.30Not reportedUSN-8847-1Not reported
Ubuntuopenssldeb24.043.0.13-0ubuntu3.16Not reportedUSN-8847-1Not reported
Ubuntuopenssldeb26.043.5.5-1ubuntu3.6Not reportedUSN-8847-1Not reported
Ubuntuopenssl1.0debpro1.0.2n-1ubuntu5.13+esm7Not reportedUBUNTU-CVE-2026-35189Not reported
Ubuntuopenssldeb22.043.0.2-0ubuntu1.30Not reportedUBUNTU-CVE-2026-35189Not reported
Ubuntuopenssldeb24.043.0.13-0ubuntu3.16Not reportedUBUNTU-CVE-2026-35189Not reported
Ubuntuopenssldeb26.043.5.5-1ubuntu3.6Not reportedUBUNTU-CVE-2026-35189Not reported
Suseopenssl-3rpmlinux enterprise server 16.03.5.0-160000.11.1Not reportedSUSE-SU-2026:24245-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 16.03.5.0-160000.11.1Not reportedSUSE-SU-2026:24245-1Not reported
Suseopenssl-3rpmlinux micro 6.23.5.0-160000.11.1Not reportedSUSE-SU-2026:24188-1Not reported
Opensuseopenssl-3rpmleap 16.03.5.0-160000.11.1Not reportedOPENSUSE-SU-2026:22102-1Not reported

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

[Debian 12 (Bookworm)]

  • [libssl3]Sconosciuto

    Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

  • [libssl-dev]Sconosciuto

    Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

  • [libssl-doc]Sconosciuto

    Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.0.20-1~deb12u2 · all · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · all · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · all · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

  • [openssl]Sconosciuto
    Dettagli (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Interessata

      nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

[Debian 13 (Trixie)]

  • [libssl3t64]Sconosciuto

    Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Corretta · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

  • [libssl-dev]Sconosciuto

    Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Corretta · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

  • [libssl-doc]Sconosciuto

    Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.5.6-1~deb13u2 · all · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · all · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · all · trixie-security

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u3 · all · trixie-security

      Corretta · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

  • [openssl]Sconosciuto
    Dettagli (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Corretta · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

  • Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Corretta · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

  • Pacchetto sorgente: [openssl]

    Dettagli (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Interessata · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Corretta · Corretta: 3.5.7-1~deb13u3

      nvd · openssl · debian · 13

Osservato:

Riferimenti