REDHAT-BUG-2537080: High severity OpenSSL OpenSSL vulnerability

Published Sep 18, 2026

Updated

The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly.

Affected Software

1 affected component

OpenSSL OpenSSL

Event History

Sep 18, 2026

Data Sourced

via Red Hat·08:03 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What runtime condition is associated with the issue?

The issue occurs in DTLS retransmission handling when a handshake message write is suspended part-way through and the message is subsequently retransmitted. The retransmission can read beyond the message buffer and overwrite state required to resume the suspended write.

Where can I check for Red Hat remediation information?

The provided Red Hat advisories are RHSA-2026:76918, RHSA-2026:77396, and RHSA-2026:80510. The supplied data does not identify the affected product versions or configurations.

REDHAT-BUG-2537080: High severity OpenSSL OpenSSL vulnerability

Affected Software

Event History

Frequently Asked Questions

What runtime condition is associated with the issue?

Where can I check for Red Hat remediation information?

Company

Resources

Contact

Frequently Asked Questions

What runtime condition is associated with the issue?

Where can I check for Red Hat remediation information?