{"schema_version":"1","data":[{"id":3849,"advisory_id":"77de3f79-16ba-4048-bed2-cb9d10dcbbb1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75806","source_published_at":"2026-09-29T15:32:21.457+00:00","published_at":"2026-10-24T21:42:25.020078+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-75806"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS","summary":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the expli","evidence":"cve:CVE-2026-75806","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-75806","aliases":["CVE-2026-75806"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.3","versionType":"semver"},{"status":"affected","version":"3.6.0","lessThan":"3.6.5","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.9","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.8","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.23","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zj","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T16:53:23.785Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260929.txt","https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-75806","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T16:52:47.298458Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T16:53:23.785Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-09-29T15:32:21.457Z"}}},"related_cves":[{"value":"CVE-2026-75806","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3849,"next_before":3849}