Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames.
Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the application acting as a QUIC client or server and a Denial of Service.
A remote peer may exhaust heap memory by flooding the local QUIC stack with PATH_CHALLENGE frames. The local QUIC stack allocates a PATH_RESPONSE frame for every PATH_CHALLENGE it receives. The allocated PATH_RESPONSE frame gets freed only when the remote peer acknowledges reception of the PATH_RESPONSE frame which will not be done by a malicious peer.
The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue. The QUIC stack is outside of OpenSSL FIPS module boundary.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-perlUpgrade openssl-develUpgrade opensslUpgrade openssl-libs | Jun 16, 2026 | Jun 11, 2026 |
| Alpine Linux | — | Upgrade openssl | Jun 18, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade openssl-snapsafe-libs-debuginfoUpgrade openssl-develUpgrade openssl-fips-provider-latest-debuginfoUpgrade openssl-fips-provider-latestUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-snapsafe-libsUpgrade openssl-perlUpgrade opensslUpgrade openssl-debugsourceUpgrade openssl-libs-debuginfo | Jun 23, 2026 | Jun 9, 2026 |
| Debian | — | Upgrade openssl | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssl111Upgrade openssl40Upgrade openssl35Upgrade openssl34Upgrade opensslUpgrade openssl36 | Jun 15, 2026 | Jun 10, 2026 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jun 10, 2026 | Jun 9, 2026 |
| Oracle Missing Cpu Jul 2026 | — | Apply the July 2026 Critical Patch Update (CPU) for Oracle Database | Jul 22, 2026 | Jun 9, 2026 |
| Redhat_linux | — | Upgrade openssl-libs-debuginfoUpgrade openssl-debuginfoUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-libsUpgrade openssl-develUpgrade openssl-perl | Jun 17, 2026 | Jun 9, 2026 |
| Rocky_linux | — | Upgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-libs-debuginfoUpgrade openssl-perlUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-devel | Jun 17, 2026 | Jun 13, 2026 |
| Ubuntu | — | Upgrade libssl3t64Upgrade opensslUpgrade libssl3 | Jun 16, 2026 | Jun 9, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 18, 2026 | Jun 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub