CVE-Katalog
CVE-2026-63076
Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted m
- Schweregrad
- Critical · CVSS 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.60% · Oct 22, 2026
Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid pointer. Impact summary: A remote, unauthenticated attacker can crash an application acting as a CMP server that accepts PBM-protected messages, or a CMP client talking to a malicious or intercepted CMP server, resulting in a Denial of Service. CWE: CWE-476: NULL Pointer Dereference Description: When verifying the password-based MAC protection of a CMP message, OpenSSL library reads the protectionAlg algorithm parameter with X509_ALGOR_get0(), which returns both the parameter type and its value pointer. The value is then cast to an ASN1_STRING and treated as the expected PBMParameter after only checking that pointer is not NULL. The parameter type returned by X509_ALGOR_get0() was never consulted. This happens during protection verification, before any MAC is computed, so no knowledge of the PBM shared secret is required; the only precondition is that PBM verification is reachable. On the server side this is reached from OSSL_CMP_SRV_process_request() for any application that stands up a CMP server accepting PBM-protected messages, and on the client side from CMP response validation against a malicious or on-path (MITM) server. The reliable consequence is a denial of service; there is no memory disclosure, no controlled memory write, and no path to code execution. CMP is a specialized feature that an application must explicitly enable. FIPS impact: no As the CMP code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | vulnerable |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | fixed |
| Ubuntu | openssl | noble | 3.0.13-0ubuntu3.15 | fixed |
| Ubuntu | libssl-dev | noble | 3.0.13-0ubuntu3.15 | fixed |
| Ubuntu | libssl-doc | noble | 3.0.13-0ubuntu3.15 | fixed |
| Ubuntu | libssl3t64 | noble | 3.0.13-0ubuntu3.15 | fixed |
| Cpe | openssl | Not reported | 4.0.2 | fixed |
| Ubuntu | edk2 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | efi-shell-aa64 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | efi-shell-arm | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | efi-shell-ia32 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | efi-shell-riscv64 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | efi-shell-x64 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | ovmf | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | ovmf-ia32 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | ovmf-legacy | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | qemu-efi-aarch64 | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | qemu-efi-arm | noble | 2024.02-2ubuntu0.10 | fixed |
| Ubuntu | qemu-efi-riscv64 | noble | 2024.02-2ubuntu0.10 | fixed |
| Alpine | openssl | 3.21 | 3.3.7-r1 | fixed |
| Alpine | openssl | 3.22 | 3.5.8-r0 | fixed |
| Alpine | openssl | 3.23 | 3.5.8-r0 | fixed |
| Alpine | openssl | 3.24 | 3.5.8-r0 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.6.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.6.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.5.7-1~deb13u2 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.22-1~deb12u1 | not yet assigned | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.13-0ubuntu3.15 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-dev | deb | noble | 3.0.13-0ubuntu3.15 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-doc | deb | noble | 3.0.13-0ubuntu3.15 | Not reported | Not reported | Not reported |
| Ubuntu | libssl3t64 | deb | noble | 3.0.13-0ubuntu3.15 | Not reported | Not reported | Not reported |
| Cpe | openssl | cpe | Not reported | 4.0.2 | Not reported | NVD-CVE-2026-63076 | Not reported |
| Ubuntu | edk2 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-aa64 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-arm | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-ia32 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-riscv64 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-x64 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf-ia32 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf-legacy | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-aarch64 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-arm | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-riscv64 | deb | noble | 2024.02-2ubuntu0.10 | Not reported | Not reported | Not reported |
| Alpine | openssl | apk | 3.21 | 3.3.7-r1 | Not reported | ALPINE-CVE-2026-63076 | Not reported |
| Alpine | openssl | apk | 3.22 | 3.5.8-r0 | Not reported | ALPINE-CVE-2026-63076 | Not reported |
| Alpine | openssl | apk | 3.23 | 3.5.8-r0 | Not reported | ALPINE-CVE-2026-63076 | Not reported |
| Alpine | openssl | apk | 3.24 | 3.5.8-r0 | Not reported | ALPINE-CVE-2026-63076 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libssl3]Betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- [libssl-dev]Betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- [libssl-doc]Betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· all · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- [openssl]Betroffen
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesBetroffen · Behoben:
3.0.22-1~deb12u1nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[Debian 13 (Trixie)]
- [libssl3t64]Betroffen
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
- [libssl-dev]Betroffen
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
- [libssl-doc]Betroffen
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· all · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· all · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u3· all · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
- [openssl]Betroffen
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
- [openssl-provider-fips]Betroffen
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
- [openssl-provider-legacy]Betroffen
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBetroffen · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.7-1~deb13u2nvd · openssl · debian · 13
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2026:67154]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-63076]
- [https://osv.dev/vulnerability/ALPINE-CVE-2026-63076]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-63076]
- [https://security-tracker.debian.org/tracker/CVE-2026-63076]
- [https://ubuntu.com/security/notices/USN-8678-1]
- [https://ubuntu.com/security/notices/USN-8865-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3034.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]