VDB
RHSA-2026:57994
RHSA-2026:57994
PUBLISHED
CVSS 3.700000047683716 LOW
A flaw was found in OpenSSL. A malicious TLS (Transport Layer Security) server can exploit this vulnerability by sending a specially crafted OCSP (Online Certificate Status Protocol) response during the X.509 certificate chain verification process. This can lead to a memory leak in client applications that have enabled OCSP response checking. Repeated connections to a malicious server could exhaust the client's memory, ultimately resulting in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | ruby3-4-main@aarch64 as a component of Red Hat Hardened Images | * |
| Red Hat | ruby3-4-main@src as a component of Red Hat Hardened Images | * |
| Red Hat | ruby3-4-main@noarch as a component of Red Hat Hardened Images | * |
| Red Hat | ruby3-4-main@x86_64 as a component of Red Hat Hardened Images | * |
Timeline
- Aug 21, 2026 CVE Published
- Aug 28, 2026 CVE Updated
- Aug 28, 2026 Distribution Patch
- Aug 28, 2026 Distribution Patch
- Aug 28, 2026 Security Advisory
- Aug 28, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:57994 advisory
- https://images.redhat.com/ advisory
- https://access.redhat.com/security/cve/CVE-2026-54876 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57994.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2511600 issue
- https://www.cve.org/CVERecord?id=CVE-2026-54876 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-54876 advisory
- https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12 advisory
- https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638 advisory
- https://openssl-library.org/news/secadv/20260805.txt advisory