USN-8625-1: OpenSSL vulnerability

unknown

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte" denial of service.

CSIRTS triage

What: Improper memory allocation in OpenSSL could lead to denial of service.
Who is affected: Users of OpenSSL who may be affected by this memory allocation issue.
Urgency: Remediation is urgent due to the potential for denial of service attacks.
Action: Users should monitor for updates and apply patches as they become available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch OpenSSL

Get an email when a new OpenSSL advisory drops — max one per day, one-click unsubscribe.

Details

Source: Ubuntu Security Notices (INTL · vendor-psirt · site)
Severity: unknown
Published: 2026-07-30
Exploitation: Not in CISA KEV at last sync

Original advisory: https://ubuntu.com/security/notices/USN-8625-1

USN-8625-1: OpenSSL vulnerability

CSIRTS triage

Details

More from Ubuntu Security Notices