SB2026083005 - openEuler 24.03 LTS SP4 update for openssl

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026083005

SB2026083005 - openEuler 24.03 LTS SP4 update for openssl

Published: August 30, 2026

Security Bulletin ID SB2026083005
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Partial DoS

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2026-14456)

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to allocation of resources without limits or throttling in the QUIC server incoming channel queue when processing valid QUIC Initial packets for unknown destination connection IDs. A remote attacker can send many QUIC Initial packets faster than the application accepts connections to cause a denial of service.

The issue affects the Listener SSL object in the QUIC server implementation and can make the QUIC listener unavailable if pending connections accumulate.


Remediation

Install update from vendor's website.

References