PT-2026-47837 · Openssl+5 · Openssl+5

Guancheng Li + 4 · CVE-2026-42767 · Published 2026-06-09 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description A NULL pointer dereference can occur in a CMP client application when processing a crafted CMP response. An attacker controlling a CMP server or acting as a man-in-the-middle can send a CRMF CertRepMessage containing an EncryptedValue structure where the symmAlg field includes an algorithm OID but lacks a parameters field. This leads to an application crash and a Denial of Service. This issue affects applications that process untrusted CMP/CRMF messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2026:25237

ALSA-2026:25239

CVE-2026-42767

ECHO-86DE-F803-EF79

OESA-2026-3002

OESA-2026-3003

OESA-2026-3006

OPENSUSE-SU-2026:11023-1

OPENSUSE-SU-2026:21005-1

RHSA-2026:25237

RHSA-2026:25239

SUSE-SU-2026:22251-1

SUSE-SU-2026:22315-1

SUSE-SU-2026:22437-1

SUSE-SU-2026:22449-1

SUSE-SU-2026:2648-1

SUSE-SU-2026:3004-1

SUSE-SU-2026:3005-1

SUSE-SU-2026:3094-1

USN-8414-1

Affected Products

Freebsd

Ibm Aix

Linuxmint

Openssl

Rocky Linux

Ubuntu

References · 140

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42767.json · Exploit
• https://github.com/openssl/openssl/commit/b90ff3b1bd33b1c18e6a09936d097c2eddef8873 · Patch
• https://github.com/openssl/openssl/commit/61a86a8cd73546c9fea916f3d304c1293e05c046 · Patch
• https://github.com/openssl/openssl/commit/665d5254083affde9982efca7c41dd01cacc8774 · Patch
• https://github.com/openssl/openssl/commit/810b722f772652ad48042bcc7ab07e3414b11d0f · Patch
• https://github.com/openssl/openssl/commit/e6f912907fc2ec82a0fd07aae55172c5e5e3d90d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-42770 · Security Note
• ❌ https://github.com/openssl/security/commit/61a86a8cd73546c9fea916f3d304c1293e05c046 · Patch, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-42766 · Security Note
• https://linux.oracle.com/errata/ELSA-2026-25239.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:25239 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-42767 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42768 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-3003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42768 · Security Note