CVE-2026-84784

A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service (DoS) by flooding a connection with connection identifier update requests while withholding acknowledgments. This behavior bypasses connection limits and forces the system to accumulate pending retirement frames, resulting in excessive memory consumption.

Last checked: 2026-09-29 22:54 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-29 16:43 UTC)

References

• NVD: CVE-2026-84784
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-10-03 05:45 UTC