CVE-2026-75806
CVE-2026-75806 · Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary.
CVSS 5.3 · Mittel · EPSS 1,1% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system · network
Betroffene Produkte und Versionen
openssl
- Softwareversionen
- ≥ 4.0.0, < 4.0.3: Betroffen (semver)
- ≥ 3.6.0, < 3.6.5: Betroffen (semver)
- ≥ 3.5.0, < 3.5.9: Betroffen (semver)
- ≥ 3.4.0, < 3.4.8: Betroffen (semver)
- ≥ 3.0.0, < 3.0.23: Betroffen (semver)
- ≥ 1.1.1, < 1.1.1zj: Betroffen (custom)
Auf 1.1.1zj aktualisieren; Auf 3.0.23 aktualisieren; Auf 3.4.8 aktualisieren; Auf 3.5.9 aktualisieren; Auf 3.6.5 aktualisieren; Auf 4.0.3 aktualisieren
openssl Debian:12
- Softwareversionen
- 3.0.10-1
- 3.0.10-1~deb12u1
- 3.0.11-1
- 3.0.11-1~deb12u1
- 3.0.11-1~deb12u2
- 3.0.12-1
- 3.0.12-2
- 3.0.13-1~deb12u1
- 3.0.13-1~deb12u2
- 3.0.14-1~deb12u1
- 3.0.14-1~deb12u2
- 3.0.15-1~deb12u1
- 3.0.16-1~deb12u1
- 3.0.17-1~deb12u1
- 3.0.17-1~deb12u2
- 3.0.17-1~deb12u3
- 3.0.18-1~deb12u1
- 3.0.18-1~deb12u2
- 3.0.19-1~deb12u1
- 3.0.19-1~deb12u2
- 3.0.20-1~deb12u1
- 3.0.20-1~deb12u2
- 3.0.22-1~deb12u1
- 3.0.9-1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.0.22-1~deb12u2
Auf 3.0.22-1~deb12u2 aktualisieren
openssl Debian:13
- Softwareversionen
- 3.5.1-1
- 3.5.1-1+deb13u1
- 3.5.2-1
- 3.5.3-1
- 3.5.4-1
- 3.5.4-1~deb13u1
- 3.5.4-1~deb13u2
- 3.5.5-1
- 3.5.5-1~deb13u1
- 3.5.5-1~deb13u2
- 3.5.6-1~deb13u1
- 3.5.6-1~deb13u2
- 3.5.7-1~deb13u1
- 3.5.7-1~deb13u2
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.5.7-1~deb13u3
Auf 3.5.7-1~deb13u3 aktualisieren
openssl Debian:14
- Softwareversionen
- 3.5.1-1
- 3.5.2-1
- 3.5.3-1
- 3.5.4-1
- 3.5.4-1~deb13u1
- 3.5.4-1~deb13u2
- 3.5.5-1
- 3.5.5-1~deb13u1
- 3.5.5-1~deb13u2
- 3.5.6-1~deb13u1
- 3.5.6-1~deb13u2
- 3.5.7-1~deb13u1
- 3.5.7-1~deb13u2
- 3.5.7-1~deb13u3
- 3.6.0-1
- 3.6.0-2
- 3.6.0~~alpha1-1
- 3.6.0~~beta1-1
- 3.6.1-1
- 3.6.1-2
- 3.6.1-3
- 3.6.2-1
- 3.6.3-1
- 3.6.4-1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.6.5-1
Auf 3.6.5-1 aktualisieren
openssl Ubuntu:Pro:14.04:LTS
- Softwareversionen
- 1.0.1e-3ubuntu1
- 1.0.1e-4ubuntu1
- 1.0.1e-4ubuntu2
- 1.0.1e-4ubuntu3
- 1.0.1e-4ubuntu4
- 1.0.1f-1ubuntu1
- 1.0.1f-1ubuntu2
- 1.0.1f-1ubuntu2.1
- 1.0.1f-1ubuntu2.2
- 1.0.1f-1ubuntu2.3
- 1.0.1f-1ubuntu2.4
- 1.0.1f-1ubuntu2.5
- 1.0.1f-1ubuntu2.7
- 1.0.1f-1ubuntu2.8
- 1.0.1f-1ubuntu2.11
- 1.0.1f-1ubuntu2.12
- 1.0.1f-1ubuntu2.15
- 1.0.1f-1ubuntu2.16
- 1.0.1f-1ubuntu2.17
- 1.0.1f-1ubuntu2.18
- 1.0.1f-1ubuntu2.19
- 1.0.1f-1ubuntu2.20
- 1.0.1f-1ubuntu2.21
- 1.0.1f-1ubuntu2.22
- 1.0.1f-1ubuntu2.23
- 1.0.1f-1ubuntu2.24
- 1.0.1f-1ubuntu2.25
- 1.0.1f-1ubuntu2.26
- 1.0.1f-1ubuntu2.27
- 1.0.1f-1ubuntu2.27+esm1
- 1.0.1f-1ubuntu2.27+esm2
- 1.0.1f-1ubuntu2.27+esm3
- 1.0.1f-1ubuntu2.27+esm4
- 1.0.1f-1ubuntu2.27+esm5
- 1.0.1f-1ubuntu2.27+esm6
- 1.0.1f-1ubuntu2.27+esm7
- 1.0.1f-1ubuntu2.27+esm9
- 1.0.1f-1ubuntu2.27+esm10
- 1.0.1f-1ubuntu2.27+esm11
- 1.0.1f-1ubuntu2.27+esm12
- 1.0.1f-1ubuntu2.27+esm13
- 1.0.1f-1ubuntu2.27+esm14
- 1.0.1f-1ubuntu2.27+esm16
- 1.0.1f-1ubuntu2.27+esm17
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:16.04:LTS
- Softwareversionen
- 1.0.2d-0ubuntu1
- 1.0.2d-0ubuntu2
- 1.0.2e-1ubuntu1
- 1.0.2f-2ubuntu1
- 1.0.2g-1ubuntu2
- 1.0.2g-1ubuntu3
- 1.0.2g-1ubuntu4
- 1.0.2g-1ubuntu4.1
- 1.0.2g-1ubuntu4.2
- 1.0.2g-1ubuntu4.4
- 1.0.2g-1ubuntu4.5
- 1.0.2g-1ubuntu4.6
- 1.0.2g-1ubuntu4.8
- 1.0.2g-1ubuntu4.9
- 1.0.2g-1ubuntu4.10
- 1.0.2g-1ubuntu4.11
- 1.0.2g-1ubuntu4.12
- 1.0.2g-1ubuntu4.13
- 1.0.2g-1ubuntu4.14
- 1.0.2g-1ubuntu4.15
- 1.0.2g-1ubuntu4.16
- 1.0.2g-1ubuntu4.17
- 1.0.2g-1ubuntu4.18
- 1.0.2g-1ubuntu4.19
- 1.0.2g-1ubuntu4.20
- 1.0.2g-1ubuntu4.20+esm1
- 1.0.2g-1ubuntu4.20+esm2
- 1.0.2g-1ubuntu4.20+esm3
- 1.0.2g-1ubuntu4.20+esm4
- 1.0.2g-1ubuntu4.20+esm5
- 1.0.2g-1ubuntu4.20+esm6
- 1.0.2g-1ubuntu4.20+esm7
- 1.0.2g-1ubuntu4.20+esm9
- 1.0.2g-1ubuntu4.20+esm10
- 1.0.2g-1ubuntu4.20+esm11
- 1.0.2g-1ubuntu4.20+esm12
- 1.0.2g-1ubuntu4.20+esm13
- 1.0.2g-1ubuntu4.20+esm14
- 1.0.2g-1ubuntu4.20+esm15
- 1.0.2g-1ubuntu4.20+esm16
- 1.0.2g-1ubuntu4.20+esm18
- 1.0.2g-1ubuntu4.20+esm19
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:Pro:16.04:LTS
- Softwareversionen
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- 0~20160408.ffea0a2c-2ubuntu0.2+esm3
- 0~20160408.ffea0a2c-2ubuntu0.2+esm4
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
nodejs Ubuntu:Pro:16.04:LTS
- Softwareversionen
- 0.10.25~dfsg2-2ubuntu1
- 4.2.2~dfsg-1
- 4.2.3~dfsg-1
- 4.2.4~dfsg-1ubuntu1
- 4.2.4~dfsg-2
- 4.2.6~dfsg-1ubuntu1
- 4.2.6~dfsg-1ubuntu4
- 4.2.6~dfsg-1ubuntu4.1
- 4.2.6~dfsg-1ubuntu4.2
- 4.2.6~dfsg-1ubuntu4.2+esm1
- 4.2.6~dfsg-1ubuntu4.2+esm2
- 4.2.6~dfsg-1ubuntu4.2+esm3
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-updates:16.04:LTS
- Softwareversionen
- 1.0.2g-1ubuntu4.fips.4.9.1
- 1.0.2g-1ubuntu4.fips.4.13.1
- 1.0.2g-1ubuntu4.fips.4.15.1
- 1.0.2g-1ubuntu4.fips.4.16.1
- 1.0.2g-1ubuntu4.fips.4.17.1
- 1.0.2g-1ubuntu4.fips.4.18.1
- 1.0.2g-1ubuntu4.fips.4.19.3
- 1.0.2g-1ubuntu4.fips.4.20.1
- 1.0.2g-1ubuntu4.fips.4.20.2
- 1.0.2g-1ubuntu4.fips.4.20.3
- 1.0.2g-1ubuntu4.fips.4.20.6
- 1.0.2g-1ubuntu4.fips.4.20.7
- 1.0.2g-1ubuntu4.fips.4.20.9
- 1.0.2g-1ubuntu4.fips.4.20.10
- 1.0.2g-1ubuntu4.fips.4.20.11
- 1.0.2g-1ubuntu4.fips.4.20.12
- 1.0.2g-1ubuntu4.fips.4.20.13
- 1.0.2g-1ubuntu4.fips.4.20.14
- 1.0.2g-1ubuntu4.fips.4.20.15
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS:16.04:LTS
- Softwareversionen
- 1.0.2g-1ubuntu4.fips.4.6~ppa1
- 1.0.2g-1ubuntu4.fips.4.6~ppa2
- 1.0.2g-1ubuntu4.fips.4.6~ppa3
- 1.0.2g-1ubuntu4.fips.4.6
- 1.0.2g-1ubuntu4.fips.4.6.1
- 1.0.2g-1ubuntu4.fips.4.6.2
- 1.0.2g-1ubuntu4.fips.4.6.3
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 1.0.2g-1ubuntu13
- 1.0.2g-1ubuntu14
- 1.0.2n-1ubuntu1
- 1.1.0g-2ubuntu1
- 1.1.0g-2ubuntu2
- 1.1.0g-2ubuntu3
- 1.1.0g-2ubuntu4
- 1.1.0g-2ubuntu4.1
- 1.1.0g-2ubuntu4.3
- 1.1.1-1ubuntu2.1~18.04.1
- 1.1.1-1ubuntu2.1~18.04.2
- 1.1.1-1ubuntu2.1~18.04.3
- 1.1.1-1ubuntu2.1~18.04.4
- 1.1.1-1ubuntu2.1~18.04.5
- 1.1.1-1ubuntu2.1~18.04.6
- 1.1.1-1ubuntu2.1~18.04.7
- 1.1.1-1ubuntu2.1~18.04.8
- 1.1.1-1ubuntu2.1~18.04.9
- 1.1.1-1ubuntu2.1~18.04.10
- 1.1.1-1ubuntu2.1~18.04.13
- 1.1.1-1ubuntu2.1~18.04.14
- 1.1.1-1ubuntu2.1~18.04.15
- 1.1.1-1ubuntu2.1~18.04.17
- 1.1.1-1ubuntu2.1~18.04.19
- 1.1.1-1ubuntu2.1~18.04.20
- 1.1.1-1ubuntu2.1~18.04.21
- 1.1.1-1ubuntu2.1~18.04.22
- 1.1.1-1ubuntu2.1~18.04.23
- 1.1.1-1ubuntu2.1~18.04.23+esm1
- 1.1.1-1ubuntu2.1~18.04.23+esm3
- 1.1.1-1ubuntu2.1~18.04.23+esm4
- 1.1.1-1ubuntu2.1~18.04.23+esm5
- 1.1.1-1ubuntu2.1~18.04.23+esm6
- 1.1.1-1ubuntu2.1~18.04.23+esm7
- 1.1.1-1ubuntu2.1~18.04.23+esm8
- 1.1.1-1ubuntu2.1~18.04.23+esm9
- 1.1.1-1ubuntu2.1~18.04.23+esm10
- 1.1.1-1ubuntu2.1~18.04.23+esm11
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl1.0 Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 1.0.2n-1ubuntu2
- 1.0.2n-1ubuntu3
- 1.0.2n-1ubuntu4
- 1.0.2n-1ubuntu5
- 1.0.2n-1ubuntu5.1
- 1.0.2n-1ubuntu5.2
- 1.0.2n-1ubuntu5.3
- 1.0.2n-1ubuntu5.4
- 1.0.2n-1ubuntu5.5
- 1.0.2n-1ubuntu5.6
- 1.0.2n-1ubuntu5.7
- 1.0.2n-1ubuntu5.8
- 1.0.2n-1ubuntu5.9
- 1.0.2n-1ubuntu5.10
- 1.0.2n-1ubuntu5.11
- 1.0.2n-1ubuntu5.12
- 1.0.2n-1ubuntu5.13
- 1.0.2n-1ubuntu5.13+esm1
- 1.0.2n-1ubuntu5.13+esm2
- 1.0.2n-1ubuntu5.13+esm3
- 1.0.2n-1ubuntu5.13+esm4
- 1.0.2n-1ubuntu5.13+esm5
- 1.0.2n-1ubuntu5.13+esm6
- 1.0.2n-1ubuntu5.13+esm7
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- 0~20180205.c0d9813c-2ubuntu0.3+esm2
- 0~20180205.c0d9813c-2ubuntu0.3+esm3
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
nodejs Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 6.11.4~dfsg-1ubuntu1
- 6.11.4~dfsg-1ubuntu2
- 6.12.0~dfsg-1ubuntu1
- 6.12.0~dfsg-2ubuntu1
- 6.12.0~dfsg-2ubuntu2
- 8.10.0~dfsg-2
- 8.10.0~dfsg-2ubuntu0.2
- 8.10.0~dfsg-2ubuntu0.3
- 8.10.0~dfsg-2ubuntu0.4
- 8.10.0~dfsg-2ubuntu0.4+esm1
- 8.10.0~dfsg-2ubuntu0.4+esm2
- 8.10.0~dfsg-2ubuntu0.4+esm3
- 8.10.0~dfsg-2ubuntu0.4+esm4
- 8.10.0~dfsg-2ubuntu0.4+esm5
- 8.10.0~dfsg-2ubuntu0.4+esm6
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-updates:18.04:LTS
- Softwareversionen
- 1.1.1-1ubuntu2.fips.2.1~18.04.5.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.6.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.7.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.3
- 1.1.1-1ubuntu2.fips.2.1~18.04.13.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.15
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.17
- 1.1.1-1ubuntu2.fips.2.1~18.04.20
- 1.1.1-1ubuntu2.fips.2.1~18.04.21
- 1.1.1-1ubuntu2.fips.2.1~18.04.22
- 1.1.1-1ubuntu2.fips.2.1~18.04.23
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.3
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.4
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.5
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.6
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.7
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.8
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.9
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS:18.04:LTS
- Softwareversionen
- 1.1.1-1ubuntu2.fips.2.1~18.04.3.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.2
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:Pro:20.04:LTS
- Softwareversionen
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- 0~20191122.bd85bf54-2ubuntu3.1
- 0~20191122.bd85bf54-2ubuntu3.2
- 0~20191122.bd85bf54-2ubuntu3.3
- 0~20191122.bd85bf54-2ubuntu3.4
- 0~20191122.bd85bf54-2ubuntu3.5
- 0~20191122.bd85bf54-2ubuntu3.6
- 0~20191122.bd85bf54-2ubuntu3.6+esm1
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:20.04:LTS
- Softwareversionen
- 1.1.1c-1ubuntu4
- 1.1.1d-2ubuntu3
- 1.1.1d-2ubuntu6
- 1.1.1f-1ubuntu1
- 1.1.1f-1ubuntu2
- 1.1.1f-1ubuntu2.1
- 1.1.1f-1ubuntu2.2
- 1.1.1f-1ubuntu2.3
- 1.1.1f-1ubuntu2.4
- 1.1.1f-1ubuntu2.5
- 1.1.1f-1ubuntu2.8
- 1.1.1f-1ubuntu2.9
- 1.1.1f-1ubuntu2.10
- 1.1.1f-1ubuntu2.11
- 1.1.1f-1ubuntu2.12
- 1.1.1f-1ubuntu2.13
- 1.1.1f-1ubuntu2.15
- 1.1.1f-1ubuntu2.16
- 1.1.1f-1ubuntu2.17
- 1.1.1f-1ubuntu2.18
- 1.1.1f-1ubuntu2.19
- 1.1.1f-1ubuntu2.20
- 1.1.1f-1ubuntu2.21
- 1.1.1f-1ubuntu2.22
- 1.1.1f-1ubuntu2.23
- 1.1.1f-1ubuntu2.24
- 1.1.1f-1ubuntu2.24+esm1
- 1.1.1f-1ubuntu2.24+esm2
- 1.1.1f-1ubuntu2.24+esm3
- 1.1.1f-1ubuntu2.24+esm4
- 1.1.1f-1ubuntu2.24+esm5
- 1.1.1f-1ubuntu2.24+esm6
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-updates:20.04:LTS
- Softwareversionen
- 1.1.1f-1ubuntu2.fips.7
- 1.1.1f-1ubuntu2.fips.7.2
- 1.1.1f-1ubuntu2.fips.12
- 1.1.1f-1ubuntu2.fips.13
- 1.1.1f-1ubuntu2.fips.13.1
- 1.1.1f-1ubuntu2.fips.16
- 1.1.1f-1ubuntu2.fips.17
- 1.1.1f-1ubuntu2.fips.18
- 1.1.1f-1ubuntu2.fips.19
- 1.1.1f-1ubuntu2.fips.20
- 1.1.1f-1ubuntu2.fips.21
- 1.1.1f-1ubuntu2.fips.22
- 1.1.1f-1ubuntu2.fips.24
- 1.1.1f-1ubuntu2.fips.24.1
- 1.1.1f-1ubuntu2.fips.24.2
- 1.1.1f-1ubuntu2.fips.24.3
- 1.1.1f-1ubuntu2.fips.24.4
- 1.1.1f-1ubuntu2.fips.24.6
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS:20.04:LTS
- Softwareversionen
- 1.1.1f-1ubuntu2.fips.2.8
- 1.1.1f-1ubuntu2.fips.7.1
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:22.04:LTS
- Softwareversionen
- 2021.08~rc0-2
- 2021.08-3
- 2021.11~rc1-1
- 2021.11-1
- 2021.11-2
- 2022.02~rc1-1
- 2022.02~rc1-1ubuntu1
- 2022.02-1
- 2022.02-2
- 2022.02-3
- 2022.02-3ubuntu0.22.04.1
- 2022.02-3ubuntu0.22.04.2
- 2022.02-3ubuntu0.22.04.3
- 2022.02-3ubuntu0.22.04.4
- 2022.02-3ubuntu0.22.04.5
- 2022.02-3ubuntu0.22.04.6
- 2022.02-3ubuntu0.22.04.7
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:22.04:LTS
- Softwareversionen
- 1.1.1l-1ubuntu1
- 3.0.0-1ubuntu1
- 3.0.1-0ubuntu1
- 3.0.2-0ubuntu1
- 3.0.2-0ubuntu1.1
- 3.0.2-0ubuntu1.2
- 3.0.2-0ubuntu1.4
- 3.0.2-0ubuntu1.5
- 3.0.2-0ubuntu1.6
- 3.0.2-0ubuntu1.7
- 3.0.2-0ubuntu1.8
- 3.0.2-0ubuntu1.9
- 3.0.2-0ubuntu1.10
- 3.0.2-0ubuntu1.12
- 3.0.2-0ubuntu1.13
- 3.0.2-0ubuntu1.14
- 3.0.2-0ubuntu1.15
- 3.0.2-0ubuntu1.16
- 3.0.2-0ubuntu1.17
- 3.0.2-0ubuntu1.18
- 3.0.2-0ubuntu1.19
- 3.0.2-0ubuntu1.20
- 3.0.2-0ubuntu1.21
- 3.0.2-0ubuntu1.23
- 3.0.2-0ubuntu1.25
- 3.0.2-0ubuntu1.26
- 3.0.2-0ubuntu1.29
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.0.2-0ubuntu1.30
Auf 3.0.2-0ubuntu1.30 aktualisieren
nodejs Ubuntu:Pro:22.04:LTS
- Softwareversionen
- 12.22.5~dfsg-5ubuntu1
- 12.22.7~dfsg-2ubuntu1
- 12.22.7~dfsg-2ubuntu3
- 12.22.9~dfsg-1ubuntu2
- 12.22.9~dfsg-1ubuntu3
- 12.22.9~dfsg-1ubuntu3.1
- 12.22.9~dfsg-1ubuntu3.2
- 12.22.9~dfsg-1ubuntu3.3
- 12.22.9~dfsg-1ubuntu3.4
- 12.22.9~dfsg-1ubuntu3.5
- 12.22.9~dfsg-1ubuntu3.6
- 12.22.9~dfsg-1ubuntu3.6+esm2
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-preview:22.04:LTS
- Softwareversionen
- 3.0.2-0ubuntu1.10+Fips1
- 3.0.2-0ubuntu1.12+Fips1
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
Originalquellen
- https://openssl-library.org/news/secadv/20260929.txt
- https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d
- https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972
- https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d
- https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d
- https://nvd.nist.gov/vuln/detail/CVE-2026-75806