Catalogo CVE

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce

[Catalogo CVE]

Gravità: High · CVSS 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Published: Sep 29, 2026, 12:00:00 AM UTC
Updated: Sep 29, 2026, 4:17:07 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.27% · Oct 22, 2026

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openssl	sid	`3.6.5-1`	fixed
Debian	openssl	forky	`3.6.5-1`	fixed
Debian	openssl	trixie	`3.5.7-1~deb13u2`	vulnerable
Debian	openssl	trixie-security	`3.5.7-1~deb13u3`	fixed
Debian	openssl	bookworm	`3.0.20-1~deb12u2`	vulnerable
Debian	openssl	bookworm-security	`3.0.22-1~deb12u1`	vulnerable
Ubuntu	openssl	noble	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	libssl-dev	noble	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	libssl-doc	noble	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	libssl3t64	noble	`3.0.13-0ubuntu3.16`	fixed
Cpe	openssl	Not reported	`4.0.3`	fixed
Alpine	openssl	3.21	`3.3.7-r2`	fixed
Suse	openssl-3	linux enterprise module for basesystem 15 sp7	`3.5.0-150700.5.53.2`	fixed
Suse	openssl-3	linux enterprise server 15 sp6-ltss	`3.1.4-150600.5.67.1`	fixed
Suse	openssl-3	linux enterprise server for sap applications 15 sp6	`3.1.4-150600.5.67.1`	fixed
Suse	openssl-3	linux enterprise micro 5.3	`3.0.8-150400.4.101.1`	fixed
Suse	openssl-3	linux enterprise micro 5.4	`3.0.8-150400.4.101.1`	fixed
Suse	openssl-3	linux enterprise high performance computing 15 sp4-espos	`3.0.8-150400.4.101.1`	fixed
Suse	openssl-3	linux enterprise high performance computing 15 sp4-ltss	`3.0.8-150400.4.101.1`	fixed
Suse	openssl-3	linux enterprise server 15 sp4-ltss	`3.0.8-150400.4.101.1`	fixed
Suse	openssl-3	linux enterprise server for sap applications 15 sp4	`3.0.8-150400.4.101.1`	fixed
Suse	openssl-3	linux enterprise high performance computing 15 sp5-espos	`3.0.8-150500.5.80.1`	fixed
Suse	openssl-3	linux enterprise high performance computing 15 sp5-ltss	`3.0.8-150500.5.80.1`	fixed
Suse	openssl-3	linux enterprise server 15 sp5-ltss	`3.0.8-150500.5.80.1`	fixed
Suse	openssl-3	linux enterprise server for sap applications 15 sp5	`3.0.8-150500.5.80.1`	fixed
Ubuntu	openssl	pro	`1.1.1c-1ubuntu4`	vulnerable
Ubuntu	openssl	pro	`1.1.1d-2ubuntu3`	vulnerable
Ubuntu	openssl	pro	`1.1.1d-2ubuntu6`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu1`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.1`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.2`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.3`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.4`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.5`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.8`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.9`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.10`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.11`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.12`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.13`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.15`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.16`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.17`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.18`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.19`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.20`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.21`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.22`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.23`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24+esm1`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24+esm2`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24+esm3`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24+esm4`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24+esm5`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.24+esm6`	fixed
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu3`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu4`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.1`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.3`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.4`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.5`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.6`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.7`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.8`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.9`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.10`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.11`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.12`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm1`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm3`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm4`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm5`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm6`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm7`	fixed
Ubuntu	openssl	22.04	`1.1.1l-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.0-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.1-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.2`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.4`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.5`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.6`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.7`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.8`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.9`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.10`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.12`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.13`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.14`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.15`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.16`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.17`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.18`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.19`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.20`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.21`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.23`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.25`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.26`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.29`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.30`	fixed
Ubuntu	openssl	24.04	`3.0.10-1ubuntu2`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu2.1`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu3`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu4`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu2`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.1`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.2`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.3`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.4`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.5`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.6`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.7`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.9`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.11`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.12`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.15`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	openssl	26.04	`3.5.3-1ubuntu2`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu1`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.2`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.3`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.4`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.5`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.6`	fixed
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.10+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.12+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.14+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.15+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.16+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.17+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.18+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.19+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.20+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.21+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.23+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.25+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.26+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.29+Fips1`	vulnerable
Ubuntu	openssl	pro	`3.0.2-0ubuntu1.30+Fips1`	vulnerable
Ubuntu	edk2	pro	`0~20190606.20d2e5a1-2ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20190828.37eef910-3`	vulnerable
Ubuntu	edk2	pro	`0~20190828.37eef910-4`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-1ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.3`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.4`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.5`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.6`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.6+esm1`	vulnerable
Ubuntu	nodejs	pro	`12.22.5~dfsg-5ubuntu1`	vulnerable
Ubuntu	nodejs	pro	`12.22.7~dfsg-2ubuntu1`	vulnerable
Ubuntu	nodejs	pro	`12.22.7~dfsg-2ubuntu3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu2`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.1`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.2`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.4`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.5`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.6`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.6+esm2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu3`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu4`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.1`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.3`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.4`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.5`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.6`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.7`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.8`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.9`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.10`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.11`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.12`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm1`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm2`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm3`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm4`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm5`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm6`	vulnerable
Ubuntu	openssl1.0	pro	`1.0.2n-1ubuntu5.13+esm7`	fixed
Ubuntu	edk2	22.04	`2021.08~rc0-2`	vulnerable
Ubuntu	edk2	22.04	`2021.08-3`	vulnerable
Ubuntu	edk2	22.04	`2021.11~rc1-1`	vulnerable
Ubuntu	edk2	22.04	`2021.11-1`	vulnerable
Ubuntu	edk2	22.04	`2021.11-2`	vulnerable
Ubuntu	edk2	22.04	`2022.02~rc1-1`	vulnerable
Ubuntu	edk2	22.04	`2022.02~rc1-1ubuntu1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-2`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.2`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.3`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.4`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.5`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.6`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.7`	vulnerable
Ubuntu	openssl	22.04	`1.1.1l-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.0-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.1-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.2`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.4`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.5`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.6`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.7`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.8`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.9`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.10`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.12`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.13`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.14`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.15`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.16`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.17`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.18`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.19`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.20`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.21`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.23`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.25`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.26`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.29`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.30`	fixed
Ubuntu	openssl-fips	pro	`3.0.13-0ubuntu3+Fips1`	vulnerable
Ubuntu	openssl-fips	pro	`3.0.13-0ubuntu3.6+Fips1`	vulnerable
Ubuntu	openssl-fips	pro	`3.0.13-0ubuntu3.12+Fips1`	vulnerable
Ubuntu	openssl-fips	pro	`3.0.13-0ubuntu3.15+Fips1`	vulnerable
Ubuntu	openssl-fips	pro	`3.0.13-0ubuntu3.15+Fips2`	vulnerable
Ubuntu	edk2	24.04	`2023.05-2`	vulnerable
Ubuntu	edk2	24.04	`2023.11-2`	vulnerable
Ubuntu	edk2	24.04	`2023.11-3`	vulnerable
Ubuntu	edk2	24.04	`2023.11-4`	vulnerable
Ubuntu	edk2	24.04	`2023.11-5`	vulnerable
Ubuntu	edk2	24.04	`2023.11-6`	vulnerable
Ubuntu	edk2	24.04	`2023.11-8`	vulnerable
Ubuntu	edk2	24.04	`2024.02-1`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.1`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.3`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.4`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.5`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.6`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.7`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.8`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.9`	vulnerable
Ubuntu	edk2	24.04	`2024.02-2ubuntu0.10`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu2`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu2.1`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu3`	vulnerable
Ubuntu	openssl	24.04	`3.0.10-1ubuntu4`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu2`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.1`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.2`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.3`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.4`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.5`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.6`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.7`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.9`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.11`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.12`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.15`	vulnerable
Ubuntu	openssl	24.04	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	edk2	26.10	`2025.11-3ubuntu7`	vulnerable
Ubuntu	edk2	26.10	`2025.11-3ubuntu8`	vulnerable
Ubuntu	edk2	26.10	`2026.05-2ubuntu1`	vulnerable
Ubuntu	edk2	26.10	`2026.05-2ubuntu2`	vulnerable
Ubuntu	edk2	26.10	`2026.05-2ubuntu3`	vulnerable
Ubuntu	edk2-hwe	26.10	`2025.11-3ubuntu8`	vulnerable
Ubuntu	edk2-hwe	26.10	`2025.11-3ubuntu9`	vulnerable
Ubuntu	edk2-hwe	26.10	`2026.05-2ubuntu1`	vulnerable
Ubuntu	edk2-hwe	26.10	`2026.05-2ubuntu2`	vulnerable
Ubuntu	edk2-hwe	26.10	`2026.05-2ubuntu3`	vulnerable
Ubuntu	edk2	26.04	`2025.02-8ubuntu3`	vulnerable
Ubuntu	edk2	26.04	`2025.11-3ubuntu6`	vulnerable
Ubuntu	edk2	26.04	`2025.11-3ubuntu7`	vulnerable
Ubuntu	edk2	26.04	`2025.11-3ubuntu7.2`	vulnerable
Ubuntu	edk2	26.04	`2025.11-3ubuntu7.3`	vulnerable
Ubuntu	edk2-hwe	26.04	`2025.11-3ubuntu6`	vulnerable
Ubuntu	edk2-hwe	26.04	`2025.11-3ubuntu8`	vulnerable
Ubuntu	edk2-hwe	26.04	`2025.11-3ubuntu8.2`	vulnerable
Ubuntu	openssl	26.04	`3.5.3-1ubuntu2`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu1`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.2`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.3`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.4`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.5`	vulnerable
Ubuntu	openssl	26.04	`3.5.5-1ubuntu3.6`	fixed
Suse	openssl-3	linux enterprise server 16.0	`3.5.0-160000.11.1`	fixed
Suse	openssl-3	linux enterprise server for sap applications 16.0	`3.5.0-160000.11.1`	fixed
Suse	openssl-3	linux micro 6.2	`3.5.0-160000.11.1`	fixed
Opensuse	openssl-3	leap 16.0	`3.5.0-160000.11.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openssl	source	sid	`3.6.5-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	forky	`3.6.5-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	trixie	`3.5.7-1~deb13u3`	not yet assigned	Not reported	Not reported
Debian	openssl	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported
Ubuntu	openssl	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Ubuntu	libssl-dev	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Ubuntu	libssl-doc	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Ubuntu	libssl3t64	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Cpe	openssl	cpe	Not reported	`4.0.3`	Not reported	NVD-CVE-2026-35189	Not reported
Alpine	openssl	apk	3.21	`3.3.7-r2`	Not reported	ALPINE-CVE-2026-35189	Not reported
Suse	openssl-3	rpm	linux enterprise module for basesystem 15 sp7	`3.5.0-150700.5.53.2`	Not reported	SUSE-SU-2026:4414-1	Not reported
Suse	openssl-3	rpm	linux enterprise server 15 sp6-ltss	`3.1.4-150600.5.67.1`	Not reported	SUSE-SU-2026:4419-1	Not reported
Suse	openssl-3	rpm	linux enterprise server for sap applications 15 sp6	`3.1.4-150600.5.67.1`	Not reported	SUSE-SU-2026:4419-1	Not reported
Suse	openssl-3	rpm	linux enterprise micro 5.3	`3.0.8-150400.4.101.1`	Not reported	SUSE-SU-2026:4413-1	Not reported
Suse	openssl-3	rpm	linux enterprise micro 5.4	`3.0.8-150400.4.101.1`	Not reported	SUSE-SU-2026:4413-1	Not reported
Suse	openssl-3	rpm	linux enterprise high performance computing 15 sp4-espos	`3.0.8-150400.4.101.1`	Not reported	SUSE-SU-2026:4413-1	Not reported
Suse	openssl-3	rpm	linux enterprise high performance computing 15 sp4-ltss	`3.0.8-150400.4.101.1`	Not reported	SUSE-SU-2026:4413-1	Not reported
Suse	openssl-3	rpm	linux enterprise server 15 sp4-ltss	`3.0.8-150400.4.101.1`	Not reported	SUSE-SU-2026:4413-1	Not reported
Suse	openssl-3	rpm	linux enterprise server for sap applications 15 sp4	`3.0.8-150400.4.101.1`	Not reported	SUSE-SU-2026:4413-1	Not reported
Suse	openssl-3	rpm	linux enterprise high performance computing 15 sp5-espos	`3.0.8-150500.5.80.1`	Not reported	SUSE-SU-2026:4412-1	Not reported
Suse	openssl-3	rpm	linux enterprise high performance computing 15 sp5-ltss	`3.0.8-150500.5.80.1`	Not reported	SUSE-SU-2026:4412-1	Not reported
Suse	openssl-3	rpm	linux enterprise server 15 sp5-ltss	`3.0.8-150500.5.80.1`	Not reported	SUSE-SU-2026:4412-1	Not reported
Suse	openssl-3	rpm	linux enterprise server for sap applications 15 sp5	`3.0.8-150500.5.80.1`	Not reported	SUSE-SU-2026:4412-1	Not reported
Ubuntu	openssl	deb	pro	`1.1.1f-1ubuntu2.24+esm6`	Not reported	USN-8847-2	Not reported
Ubuntu	openssl1.0	deb	pro	`1.0.2n-1ubuntu5.13+esm7`	Not reported	USN-8847-2	Not reported
Ubuntu	openssl	deb	22.04	`3.0.2-0ubuntu1.30`	Not reported	USN-8847-1	Not reported
Ubuntu	openssl	deb	24.04	`3.0.13-0ubuntu3.16`	Not reported	USN-8847-1	Not reported
Ubuntu	openssl	deb	26.04	`3.5.5-1ubuntu3.6`	Not reported	USN-8847-1	Not reported
Ubuntu	openssl1.0	deb	pro	`1.0.2n-1ubuntu5.13+esm7`	Not reported	UBUNTU-CVE-2026-35189	Not reported
Ubuntu	openssl	deb	22.04	`3.0.2-0ubuntu1.30`	Not reported	UBUNTU-CVE-2026-35189	Not reported
Ubuntu	openssl	deb	24.04	`3.0.13-0ubuntu3.16`	Not reported	UBUNTU-CVE-2026-35189	Not reported
Ubuntu	openssl	deb	26.04	`3.5.5-1ubuntu3.6`	Not reported	UBUNTU-CVE-2026-35189	Not reported
Suse	openssl-3	rpm	linux enterprise server 16.0	`3.5.0-160000.11.1`	Not reported	SUSE-SU-2026:24245-1	Not reported
Suse	openssl-3	rpm	linux enterprise server for sap applications 16.0	`3.5.0-160000.11.1`	Not reported	SUSE-SU-2026:24245-1	Not reported
Suse	openssl-3	rpm	linux micro 6.2	`3.5.0-160000.11.1`	Not reported	SUSE-SU-2026:24188-1	Not reported
Opensuse	openssl-3	rpm	leap 16.0	`3.5.0-160000.11.1`	Not reported	OPENSUSE-SU-2026:22102-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libssl3]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[libssl-dev]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[libssl-doc]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[openssl]Interessata
Dettagli (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Interessata
  nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

[Debian 13 (Trixie)]

[libssl3t64]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[libssl-dev]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[libssl-doc]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · all · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · all · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[openssl]Interessata
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[openssl-provider-fips]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[openssl-provider-legacy]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13

Osservato: Oct 23, 2026, 11:04:51 PM UTC

Riferimenti

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]