Description
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite
can be terminated by a single unauthenticated datagram whose encrypted
fragment is shorter than the mandatory explicit IV and authentication tag
overhead.
Impact summary: An attacker who can send a datagram that is routed to an
existing DTLS 1.2 association can tear that association down without knowing
any key material. This is a Denial of Service limited to the targeted
association. There is no memory safety or confidentiality impact.
CWE: CWE-1284: Improper Validation of Specified Quantity in Input
Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher
suite carries an explicit IV followed by the ciphertext and an authentication
tag. When decrypting such a record the record layer passed the record length to
the cipher implementation before checking that the record was long enough to
contain the explicit IV and the tag. For a record shorter than that overhead the
cipher implementation rejected the impossible length, and the record layer
treated this as an internal failure and raised a fatal internal_error alert
instead of treating the record as one that failed authentication.
In TLS 1.2 the same record causes a fatal internal_error alert instead of the
expected bad_record_mac alert. Since any undecryptable record already
terminates a TLS connection, this is a protocol conformance issue rather than
a security issue in TLS.
The fix validates the record length against the explicit IV and tag length
before any AEAD processing, so that TLS reports bad_record_mac and DTLS
silently discards the record.
FIPS impact: no
The affected code is outside the FIPS module boundary.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 4.0.0 – < 4.0.3, 3.6.0 – < 3.6.5, 3.5.0 – < 3.5.9, 3.4.0 – < 3.4.8, 3.0.0 – < 3.0.23, 1.1.1 – < 1.1.1zj | 4.0.3 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.6.5-1 | — |
| Debian 13 | openssl | 3.5.7-1~deb13u3 | — |
| Debian 12 | openssl | 3.0.22-1~deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | openssl | 3.5.5-1ubuntu3.6 | USN-8847-1 |
| Ubuntu 24.04 LTS | edk2 | No fix yet | — |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.16 | USN-8847-1 |
| Ubuntu 22.04 LTS | edk2 | No fix yet | — |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.30 | USN-8847-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 20.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | edk2 +3 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | edk2 +2 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | openssl | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | openssl +3 | 1:3.5.9-1.el10_3 | RHSA-2026:98588 |
| RHEL 9 | openssl +3 | 1:3.5.9-1.el9_9 | RHSA-2026:98484 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | openssl +10 | 1:3.5.9-0.1.hum1 | RHSA-2026:74166, RHSA-2026:74162 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | openssl +3 | 1:3.5.9-1.el10_3 | RLSA-2026:98588 |
| Rocky Linux 9 | openssl +3 | 1:3.5.9-1.el9_9 | RLSA-2026:98484 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssl-1_1 | 1.1.1w-150700.11.35.1 | SUSE-SU-2026:5172-1 |
| SLES 15 SP7 | openssl-3 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 |
| SLES 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.43.1 | SUSE-SU-2026:5206-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.67.1 | SUSE-SU-2026:4419-1 |
| SLES 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.80.1 | SUSE-SU-2026:4412-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.142.1 | SUSE-SU-2026:5196-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | openssl-3 | 3.5.0-160000.11.1 | SUSE-SU-2026:24245-1 |
| SLES for SAP 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.43.1 | SUSE-SU-2026:5206-1 |
| SLES for SAP 15 SP6 | openssl-3 | 3.1.4-150600.5.67.1 | SUSE-SU-2026:4419-1 |
| SLES for SAP 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLES for SAP 15 SP5 | openssl-3 | 3.0.8-150500.5.80.1 | SUSE-SU-2026:4412-1 |
| SLES for SAP 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLES 16.0 | openssl-3 | 3.5.0-160000.11.1 | SUSE-SU-2026:24245-1 |
| SLE Micro 6.2 | openssl-3 | 3.5.0-160000.11.1 | SUSE-SU-2026:24188-1 |
| SLE Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_14.1 | SUSE-SU-2026:24273-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-159998.1.1 | SUSE-SU-2026:24133-1 |
| SLE Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLE Micro 5.4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLE HPC 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLE HPC 15 SP5 | openssl-3 | 3.0.8-150500.5.80.1 | SUSE-SU-2026:4412-1 |
| SLE HPC 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | openssl-3 | 3.5.0-160000.11.1 | openSUSE-SU-2026:22102-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.21 | openssl | 3.3.7-r2 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | edk2-ovmf +3 | 20260508-2.amzn2023 | ALAS2023-2026-3227 |
| Amazon Linux 2023 | openssl +5 | 1:3.5.8-1.amzn2023.0.3 | ALAS2023-2026-3204 |
| Amazon Linux 2 | edk2-ovmf +3 | 20240813-314.amzn2 | ALAS2-2026-4007 |
| Amazon Linux 2 | openssl11 +3 | 1:1.1.1zj-1.amzn2.0.1 | ALAS2-2026-3991 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-21 | — |
| Azure Linux 3 | openssl | 3.3.7-7 | — |
| Azure Linux 3 | qemu +5 | No fix yet | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl-4.0 +2 | 4.0.3-r0 | — |
Advisories 27
- RHSA-2026:98588 Red Hat Security Advisory: openssl security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98484 Red Hat Security Advisory: openssl security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:74162 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:74166 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RLSA-2026:98588 Moderate: openssl security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98484 Moderate: openssl security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- WID-SEC-2026-3638 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- SUSE-SU-2026:5206-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5205-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5197-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5196-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5172-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 11, 2026
- SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
- SUSE-SU-2026:24273-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 27, 2026
- ALAS2023-2026-3227 Important: edk2 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 26, 2026
- ALAS2-2026-4007 Important: edk2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 26, 2026
- SUSE-SU-2026:24245-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 21, 2026
- SUSE-SU-2026:24188-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 20, 2026
- openSUSE-SU-2026:22102-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 19, 2026
- SUSE-SU-2026:24133-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 15, 2026
- ALAS2-2026-3991 Important: openssl11 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 12, 2026
- ALAS2023-2026-3204 Important: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 12, 2026
- SUSE-SU-2026:4412-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4413-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4414-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4419-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- USN-8847-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Oct 2, 2026
References
- OpenSSL Advisory vendor-advisory
- 4.0.3 git commit patch
- 3.6.5 git commit patch
- 3.5.9 git commit patch
- 3.4.8 git commit patch