CVE Explorer

CVE-2026-34183

Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the application acting as a QUIC client or server and a Denial of Service. A remote peer may exhaust heap memory by flooding the local QUIC stack with PATH_CHALLENGE frames. The local QUIC stack allocates a PATH_RESPONSE frame for

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:818a46348337142ca6232e29c2e816e94a979128eae79fbdd5cc1f06570d378b

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"OpenSSL","vendor":"OpenSSL","versions":[{"lessThan":"4.0.1","status":"affected","version":"4.0.0","versionType":"semver"},{"lessThan":"3.6.3","status":"affected","version":"3.6.0","versionType":"semver"},{"lessThan":"3.5.7","status":"affected","version":"3.5.0","versionType":"semver"},{"lessThan":"3.4.6","status":"affected","version":"3.4.0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-1325","description":"CWE-1325 Improperly Controlled Sequential Memory Allocation","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/problemTypes/0/descriptions/0

Source references

5 source assertions

{"name":"3.6.3 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/references/2

{"name":"3.5.7 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/references/3

{"name":"3.4.6 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/d2e9efbe4900a373227deb136e8665401404ffac"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/references/4

{"name":"4.0.1 git commit","tags":["patch"],"url":"https://github.com/openssl/openssl/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/references/1

{"name":"OpenSSL Advisory","tags":["vendor-advisory"],"url":"https://openssl-library.org/news/secadv/20260609.txt"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6a8a6be7eaea9c71e1b1f8f3bbc9d9d832e1f9329385a13c0883e863bbddea33 · sha256:aea137c3a2242353… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer