CVE-2026-87734: High severity utcp/utcp vulnerability
An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to remote exploitation?
Deployments using the OCaml utcp package before version 0.0.6 are affected. The network attack vector and lack of required privileges or user interaction indicate that a remote attacker can target a reachable affected instance.
What does an attacker need to do to trigger the issue?
The issue is triggered through out-of-order segment reassembly. The available data indicates low attack complexity, with no authentication or user interaction required.
What is the impact of successful exploitation?
Successful exploitation can cause a denial of service. The provided vector indicates availability impact only, with no indicated confidentiality or integrity impact.
What version should be used to remediate the issue?
Upgrade the utcp package to version 0.0.6 or later. Versions before 0.0.6 are identified as affected.