https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:42:05.465391+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2022-3996 Withdrawn: BELL-CVE-2022-3996 — CVE-2022-3996 does not affect BellSoft software 2026-10-03T23:42:05.637093+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-1099 certfr-2022-avi-1099 — Une vulnérabilité a été découverte dans OpenSSL. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-03T23:42:05.637149+00:00 certfr-2022-avi-1099 https://cve.radiocsirt.org/vuln/cleanstart-2026-fu56835 CLEANSTART-2026-FU56835 — Security fix for CVE-2022-3996 applied in: openssl 3.0.7-r2 2026-10-03T23:42:05.637167+00:00

Affected: CleanStart: openssl

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-12693 EUVD-2026-12693 2026-10-03T23:42:05.637200+00:00 EUVD-2026-12693 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3996 fkie_cve-2022-3996 2026-10-03T23:42:05.637212+00:00

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process hangs. Policy processing being enabled on a publicly facing server is not considered to be a common setup.

Policy processing is enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Update (31 March 2023): The description of the policy processing enablement was corrected based on CVE-2023-0466.

 https://cve.radiocsirt.org/vuln/ghsa-vr8j-hgmm-jh9r GHSA-vr8j-hgmm-jh9r — Denial of service by double-checked locking in openssl-src 2026-10-03T23:42:05.637243+00:00

Affected: crates.io: openssl-src

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process hangs. Policy processing being enabled on a publicly facing server is not considered to be a common setup. Policy processing is enabled by passing the `-policy' argument to the command line utilities or by calling either `X509_VERIFY_PARAM_add0_policy()' or `X509_VERIFY_PARAM_set1_policies()' functions.

 https://cve.radiocsirt.org/vuln/gsd-2022-3996 gsd-2022-3996 2026-10-03T23:42:05.637269+00:00 gsd-2022-3996 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3996 msrc_CVE-2022-3996 — X.509 Policy Constraints Double Locking 2026-10-03T23:42:05.637281+00:00 msrc_CVE-2022-3996 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12573-1 openSUSE-SU-2024:12573-1 — libopenssl-3-devel-3.0.7-2.1 on GA media 2026-10-03T23:42:05.637298+00:00

libopenssl-3-devel-3.0.7-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3996 UBUNTU-CVE-2022-3996 2026-10-03T23:42:05.637314+00:00

Affected: Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:22.04:LTS: openssl

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process hangs. Policy processing being enabled on a publicly facing server is not considered to be a common setup. Policy processing is enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function. Update (31 March 2023): The description of the policy processing enablement was corrected based on CVE-2023-0466.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2310 WID-SEC-W-2022-2310 — OpenSSL: Schwachstelle ermöglicht Denial of Service 2026-10-03T23:42:05.637340+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen.