SB2026091356 - openEuler 24.03 LTS SP4 update for compat-openssl11

Description

This security bulletin contains information about 2 vulnerabilities.

1) Asymmetric Resource Consumption (Amplification) (CVE-ID: CVE-2026-54874)

CWE-ID: CWE-405 - Asymmetric Resource Consumption (Amplification)

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to asymmetric resource consumption in DTLS record buffering when receiving future-epoch records during a handshake in progress. A remote attacker can send numerous small forged DTLS records claiming to belong to the next epoch to cause a denial of service.

Up to 100 such records may be buffered per connection, retaining around 1.7 megabytes of memory because the implementation keeps the entire read buffer for each buffered record.

2) Out-of-bounds write (CVE-ID: CVE-2026-63072)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds write in OpenSSL CMS decryption key unwrapping logic when decrypting a crafted CMS message through CMS_decrypt(). A remote attacker can supply a crafted CMS message to cause a denial of service.

The issue causes a deterministic 8-byte heap write immediately past the allocation when the key-wrap OID is changed to select the padded variant.

Remediation

Install update from vendor's website.

References

• https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3820