CVE-Katalog
CVE-2026-28386
Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks
- Schweregrad
- High · CVSS 7.5
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.33% · Oct 22, 2026
Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application if the input buffer ends at a memory page boundary and the following page is unmapped. There is no information disclosure as the over-read bytes are not written to output. The vulnerable code path is only reached when processing partial blocks (when a previous call left an incomplete block and the current call provides fewer bytes than needed to complete it). Additionally, the input buffer must be positioned at a page boundary with the following page unmapped. CFB mode is not used in TLS/DTLS protocols, which use CBC, GCM, CCM, or ChaCha20-Poly1305 instead. For these reasons the issue was assessed as Low severity according to our Security Policy. Only x86-64 systems with AVX-512 and VAES instruction support are affected. Other architectures and systems without VAES support use different code paths that are not affected. OpenSSL FIPS module in 3.6 version is affected by this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | not affected |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | not affected |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | not affected |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | not affected |
| Cpe | openssl | Not reported | 3.6.2 | fixed |
| Cpe | openssl | Not reported | Not reported | not affected |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.6.2-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.6.2-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | openssl | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Cpe | openssl | cpe | Not reported | 3.6.2 | Not reported | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libssl3]Nicht betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
- [libssl-dev]Nicht betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
- [libssl-doc]Nicht betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
- [openssl]Nicht betroffen
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
nvd · openssl · debian · bookworm
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2026:7261]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-28386]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-28386]
- [https://security-tracker.debian.org/tracker/CVE-2026-28386]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0995.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]