Vulnerability Bulletins |
CVE-2026-81699 |
|
| Affected software | OPENSSL |
| openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust system resources and crash or wedge the process before password verification occurs. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-81699 | |