目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2026-54874— OpenSSL 资源管理错误漏洞

一分钟漏洞结论

影响对象
OpenSSL OpenSSL
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

OpenSSL是OpenSSL团队开源的一个提供安全通信加密功能的软件库。 OpenSSL 4.0.2之前版本、3.6.4之前版本、3.5.8之前版本、3.4.7之前版本、3.0.22之前版本、1.1.1zi之前版本和1.0.2zr之前版本存在资源管理错误漏洞，该漏洞源于DTLS握手期间接收未来epoch的记录导致缓冲过多内存，可能允许攻击者利用少量网络流量造成拒绝服务。

AI 预测 5.3 利用难度: 较易 EPSS 0.62% · P49

影响版本矩阵 7

厂商产品 版本范围状态
OpenSSL OpenSSL 4.0.0< 4.0.2 affected
3.6.0< 3.6.4 affected
3.5.0< 3.5.8 affected
3.4.0< 3.4.7 affected
3.0.0< 3.0.22 affected
1.1.1< 1.1.1zi affected
1.0.2< 1.0.2zr affected
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-54874 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Excessive Memory Use Buffering DTLS Records for a Future Epoch
来源: CVE Program / CVE List V5
Vulnerability Description
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amount of memory, which may lead to a Denial of Service. CWE: CWE-405: Asymmetric Resource Consumption (Amplification) Description: While a DTLS handshake is in progress, a peer may legitimately have already moved on to the next epoch (for example, having sent its ChangeCipherSpec and Finished messages) before the local endpoint has processed the same transition, typically because of reordering on the underlying UDP transport. OpenSSL buffers such early records so that they can be processed once the local endpoint catches up. Buffering a record currently retains the entire read buffer it arrived in, which is sized to hold the largest possible DTLS record (around 16 kilobytes), rather than just the bytes that make up the record itself. Up to 100 such records may be buffered per connection. As a result, a peer that sends a stream of small forged records claiming to belong to the next epoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of memory, despite sending only a small fraction of that amount of data over the network. An attacker therefore gains a memory amplification factor of around 1200, and can multiply the effect across as many associations as it is able to open, making this a remote memory exhaustion Denial of Service risk for DTLS servers. Since the memory retained per connection remains bounded, and any limit an application already places on the number of concurrent associations also bounds the total exposure, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. OpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.2. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.4. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.8. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.7. OpenSSL 3.0 users should upgrade to OpenSSL 3.0.22. Premium support customers only: OpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi OpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr This issue was reported on 18 May 2026 by Amazon Web Services. The fix has been developed by Matt Caswell. -- cut (non-publishing metadata for internal use) -- Reported by: Amazon Web Services Fixed by: Matt Caswell
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
不对称的资源消耗(放大攻击)
来源: CVE Program / CVE List V5
Vulnerability Title
OpenSSL 资源管理错误漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
OpenSSL是OpenSSL团队开源的一个提供安全通信加密功能的软件库。 OpenSSL 4.0.2之前版本、3.6.4之前版本、3.5.8之前版本、3.4.7之前版本、3.0.22之前版本、1.1.1zi之前版本和1.0.2zr之前版本存在资源管理错误漏洞，该漏洞源于DTLS握手期间接收未来epoch的记录导致缓冲过多内存，可能允许攻击者利用少量网络流量造成拒绝服务。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商 产品 影响版本 CPE 订阅
OpenSSL OpenSSL 4.0.0 ~ 4.0.2 -

二、漏洞 CVE-2026-54874 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-54874 的情报信息

请登录查看更多情报信息。

CVE-2026-54874 补丁与修复 (5)

CVE-2026-54874 厂商安全公告 (1)

同批安全公告 · OpenSSL · 2026-08-25 · 共 9 条

CVE-2026-75803 OpenSSL 加密问题漏洞
CVE-2026-18798 OpenSSL 资源管理错误漏洞
CVE-2026-63074 OpenSSL 资源管理错误漏洞
CVE-2026-63072 OpenSSL 缓冲区错误漏洞
CVE-2026-63073 OpenSSL 格式化字符串错误漏洞
CVE-2026-63075 OpenSSL 资源管理错误漏洞
CVE-2026-63076 OpenSSL 异常处理不当漏洞
CVE-2026-14457 OpenSSL 异常处理不当漏洞

IV. Related Vulnerabilities

Same product: OpenSSL
Same vendor: OpenSSL
Same weakness: CWE-405

V. Comments for CVE-2026-54874

暂无评论

发表评论