Skip to content
OpenSSL Vulnerabilities Enable Denial of Service Attacks

OpenSSL Vulnerabilities Enable Denial of Service Attacks

First seen 26 Aug 2026, 04:54 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 27, 2026 at 03:39 UTC
  • •OpenSSL vulnerabilities could lead to denial-of-service attacks.
  • •Affected systems include various Ubuntu LTS versions and OpenSSL 1.0.
  • •Security updates were released on August 25, 2026, to address these flaws.

OpenSSL has disclosed multiple vulnerabilities affecting various versions, including OpenSSL 4.0, 3.6, and legacy 1.1.1. These flaws could allow remote attackers to crash servers or exhaust memory resources, leading to denial-of-service conditions. The vulnerabilities were detailed in advisories published on August 25, 2026, and include CVEs such as CVE-2026-14456, CVE-2026-14457, and CVE-2026-18798. Affected systems include Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, and 26.04 LTS. Security updates have been released to address these issues, and administrators are urged to apply them promptly to mitigate risks. The vulnerabilities are primarily related to improper handling of network packets and cryptographic messages. The advisory categorizes the issues into moderate and low severity, emphasizing the need for immediate patching.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 46d ago How this analysis works

Timeline

2024-04-08
CVE-2024-2511 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2024-06-27
CVE-2024-5535 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-25
OpenSSL vulnerabilities disclosed
OpenSSL released advisories detailing multiple vulnerabilities affecting various versions, allowing potential denial-of-service attacks.
Gbhackers
2026-08-25
Security updates released
Updates were issued for OpenSSL and OpenSSL 1.0 on Ubuntu 14.04, 16.04, 18.04, and 26.04 LTS to address the vulnerabilities.
Ubuntu
2026-08-25
CVE-2026-14456 published
OpenSSL incorrectly handled QUIC server incoming channel queue, leading to potential denial of service.
Ubuntu
2026-08-25
CVE-2026-14457 published
OpenSSL mishandled signature algorithm selection with Raw Public Keys, risking crashes and denial of service.
Ubuntu
2026-08-25
CVE-2026-18798 published
OpenSSL's improper handling of QUIC INITIAL packet processing could lead to crashes and denial of service.
Ubuntu
2026-08-25
CVE-2026-54874 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-25
CVE-2026-63073 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-25
CVE-2026-75803 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (6)

Following this threat?

Track Ubuntu and CVE-2024-2511 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 3