Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-118374— LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

Quick assessment

Affected

OpenBSD LibreSSL

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

LibreSSL 的工具（版本 4.4.0 及之前）存在内存耗尽漏洞。恶意的 OCSP 响应服务器可通过发送无限制的 HTTP 响应来耗尽客户端内存。攻击者若控制 OCSP 响应服务器，或能够拦截明文 HTTP AIA OCSP 流量，即可向和函数持续流式传输无限的 HTTP 头部或主体数据，从而导致证书状态检查功能被拒绝服务。

CVSS 5.9 · Medium Updated Oct 28, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

Source: CVE Program / CVE List V5

Vulnerability Description

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attackers controlling the responder or intercepting plain HTTP AIA OCSP traffic can stream endless headers or body data to http_head_read() and http_body_read(), denying certificate status checks.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

不加限制或调节的资源分配

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
OpenBSD	LibreSSL	0 ~ 4.4.0	-

II. Public POCs for CVE-2026-118374

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-118374

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-118374 (3)

Vendor Advisories for CVE-2026-118374 (1)

🔗 LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response | Advisories | VulnCheck third-party-advisory

Vendor Pages for CVE-2026-118374 (2)

https://www.cve.org/CVERecord?id=CVE-2026-118374

Same Patch Batch · OpenBSD · 2026-10-28 · 4 CVEs total

CVE-2026-118371	3.7 LOW	LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line
CVE-2026-118372	3.7 LOW	LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path
CVE-2026-118373	3.7 LOW	LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()

IV. Related Vulnerabilities

Same product: LibreSSL

Same vendor: OpenBSD

Same weakness: CWE-770