Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
OpenSSL-3 Memory Allocation Denial of Service Risk
published 3 months ago
Summary
This update fixes a vulnerability in OpenSSL-3 that could allow an attacker to crash a system by manipulating memory allocation. This is a denial of service risk, which means it could make your system unavailable, but it does not allow an attacker to access or steal sensitive information. To protect your system, apply this update as soon as possible.
What to do
- Update suse openssl-3 to version 3.5.0-160000.9.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.2 | suse | openssl-3 |
< 3.5.0-160000.9.1 Fix: upgrade to 3.5.0-160000.9.1
|
Original advisory text
Security update for openssl-3
This update for openssl-3 fixes the following issue:
- "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
- "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202622939-1/ Vendor Advisory
- https://bugzilla.suse.com/1271712 Third Party Advisory
Timeline
Published25 Jul 2026
Updated29 Jul 2026
First seen29 Jul 2026
Sources
SUSE-SU-2026:22939-1 · OSV
Track software like this
Free during beta