CVE-2026-84784— QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
一分钟漏洞结论
影响对象
OpenSSL OpenSSL
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-84784 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
来源: CVE Program / CVE List V5
Vulnerability Description
Issue summary: A malicious remote peer may flood the local QUIC
stack with NEW_CONNECTION_ID frames by avoiding a limit check on
how many connection IDs the remote QUIC stack can use.
Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame
for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID
frame is dispatched via the Control Frame Queue (CFQ). If the remote
peer also withholds ACKs, then it can force the local stack
to allocate ~400MB (depending on ACK delay).
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism
by which a remote peer can notify the local QUIC stack to change the
destination connection ID (a.k.a. CID) the local stack uses to
identify the connection at the remote peer. Each CID is associated
with a sequence number. The sequence number is transmitted
in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID
which is being either associated with a connection or retired.
The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know
a new CID is being associated with an existing connection. The
NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the
retire-prior-to number. The retire-prior-to identifies existing
CIDs that are to be retired. The local QUIC stack must send a
RETIRE_CONNECTION_ID for every destination CID whose sequence number
is less than retire-prior-to. The CID becomes retired after the
local stack receives an ACK for its RETIRE_CONNECTION_ID frame.
Although the OpenSSL QUIC stack supports at most one destination CID
for every connection, it can be tricked into processing more than
one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC
stack currently retires the destination CID as soon as it receives
the NEW_CONNECTION_ID, while in fact the destination CID must
be retired after an ACK for the RETIRE_CONNECTION_ID frame is received.
Correcting the flawed logic also fixes the backlog growth.
[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids
FIPS impact: no
The FIPS module is not affected as the QUIC implementation is outside of
the OpenSSL FIPS module boundary.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-84784 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-84784 的情报信息
请登录查看更多情报信息。
CVE-2026-84784 其他参考 (5)
-
https://openssl-library.org/news/secadv/20260929.txt vendor-advisory
同批安全公告 · OpenSSL · 2026-09-29 · 共 14 条
| CVE-2026-35189 | Excessive Memory Allocation in Relative CRLDP Processing | |
| CVE-2026-35191 | QUIC Unvalidated Amplification Credit may be Over Accounted | |
| CVE-2026-75806 | Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS | |
| CVE-2026-75804 | QUIC Connection-Level Flow Control is Not Enforced for Streams | |
| CVE-2026-75805 | NULL Pointer Dereference in CMP Client Revocation Response Handling | |
| CVE-2026-42772 | Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC | |
| CVE-2026-54873 | QUIC STREAM Fragment Metadata DoS | |
| CVE-2026-54872 | Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves | |
| CVE-2026-54875 | Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V | |
| CVE-2026-77696 | Timing Side-Channel in SM2 Signature Generation | |
| CVE-2026-72897 | Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake | |
| CVE-2026-84782 | DTLS Retransmits Handshake Messages From a Stale Buffer Offset | |
| CVE-2026-84783 | Use-After-Free in X.509 Extension Cache Under Concurrent Use |
IV. Related Vulnerabilities
Same product: OpenSSL
-
CVE-2026-84783
Use-After-Free in X.509 Extension Cache Under Concurrent Use -
CVE-2026-84782
DTLS Retransmits Handshake Messages From a Stale Buffer Offs -
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation -
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes D -
CVE-2026-75805
NULL Pointer Dereference in CMP Client Revocation Response H
Same vendor: OpenSSL
-
CVE-2026-84783
Use-After-Free in X.509 Extension Cache Under Concurrent Use -
CVE-2026-84782
DTLS Retransmits Handshake Messages From a Stale Buffer Offs -
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation -
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes D -
CVE-2026-75805
NULL Pointer Dereference in CMP Client Revocation Response H
Same weakness: CWE-770
-
CVE-2026-97689
urllib3: HTTPResponse.stream()/read_chunked() buffers an unb -
CVE-2026-75804
QUIC Connection-Level Flow Control is Not Enforced for Strea -
CVE-2026-54873
QUIC STREAM Fragment Metadata DoS -
CVE-2026-35189
Excessive Memory Allocation in Relative CRLDP Processing -
CVE-2026-101917
PyJWT JWK客户端未知kid值放大未认证JWKS获取漏洞
V. Comments for CVE-2026-84784
暂无评论