VDB
RHSA-2026:57986
RHSA-2026:57986
PUBLISHED
CVSS 4 MEDIUM
A flaw was found in OpenSSL. A malicious TLS (Transport Layer Security) server can exploit this vulnerability by sending a specially crafted OCSP (Online Certificate Status Protocol) response during the X.509 certificate chain verification process. This can lead to a memory leak in client applications that have enabled OCSP response checking. Repeated connections to a malicious server could exhaust the client's memory, ultimately resulting in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | ruby3-3-main@aarch64 as a component of Red Hat Hardened Images | * |
| Red Hat | ruby3-3-main@noarch as a component of Red Hat Hardened Images | * |
| Red Hat | ruby3-3-main@x86_64 as a component of Red Hat Hardened Images | * |
| Red Hat | ruby3-3-main@src as a component of Red Hat Hardened Images | * |
Timeline
- Aug 21, 2026 CVE Published
- Sep 6, 2026 CVE Updated
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:57986 advisory
- https://images.redhat.com/ advisory
- https://access.redhat.com/security/cve/CVE-2026-54876 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://access.redhat.com/security/cve/CVE-2026-80213 advisory
- https://access.redhat.com/security/cve/CVE-2026-80212 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57986.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2511600 issue
- https://www.cve.org/CVERecord?id=CVE-2026-54876 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-54876 advisory
- https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12 advisory
- https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638 advisory
- https://openssl-library.org/news/secadv/20260805.txt advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2525066 issue
- https://www.cve.org/CVERecord?id=CVE-2026-80212 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-80212 advisory
- https://github.com/ruby/resolv/commit/6393c628b224d0234ef915813c0977e11ebe57ea advisory
- https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2525014 issue
- https://www.cve.org/CVERecord?id=CVE-2026-80213 advisory
…and 2 more