OpenSSL Flaws Allow Remote Attackers to Crash Servers With Malformed Packets

Gbhackers •Divya • August 26, 2026

OpenSSL has released security updates addressing nine vulnerabilities that could allow remote attackers to crash QUIC, DTLS, CMS, CMP, and TLS-enabled applications through malformed network packets or cryptographic messages. The advisory dated August 25, 2026, highlights three moderate-severity issues and six low-severity flaws. Most of these problems could lead to denial-of-service (DoS) conditions due to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenSSL Vulnerabilities Enable Denial of Service Attacks OpenSSL has disclosed multiple vulnerabilities affecting various versions, including OpenSSL 4.0, 3.6, and legacy 1.1.1. These flaws could allow remote attackers to crash servers or exhaust memory resources, leading to denial-of-service conditions. The vulnerabilities were detailed in advisories published on August 25, 2026, and include CVEs such as CVE-2026-14456, CVE-2026-14457, and CVE-2026-18798. Affected systems include Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, and 26.04 LTS. Security updates have been released to address these issues, and administrators are urged to apply them promptly to mitigate risks. The vulnerabilities are primarily related to improper handling of network packets and cryptographic messages. The advisory categorizes the issues into moderate and low severity, emphasizing the need for immediate patching. 6 sources 61

OpenSSL Flaws Allow Remote Attackers to Crash Servers With Malformed Packets

The full story

Extracted Entities

Attack Types (1)

Tools (1)