AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
Priority MEDIUM 47CWE-354Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 3 fixed, 28 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function. Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and expecting the call to check the AEAD tag may accept forged messages. CWE: CWE-354 (Improper Validation of Integrity Check Value) Description: The EVP_Cipher() API call for AEAD ciphers behaves like a one shot encryption and decryption call. It also verifies the AEAD tag after the decryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers it skipped the AEAD tag verification when an empty ciphertext was passed to the function. The callers of this function might believe that a successful return indicates a valid AEAD tag for these ciphers, even when that has not truly been validated in this case. FIPS impact: no The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as the affected algorithms are not FIPS approved and thus not implemented in the FIPS module.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00254 17th percentileScored 2026-11-07
Fix Partial OpenSSL (OpenSSL): 4.0.2, 3.6.4, 3.5.8 +2Red Hat: 9 advisoriesRed Hat: 3 fixed, 28 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenSSL | OpenSSL | 4.0.0 to before 4.0.2; 3.6.0 to before 3.6.4; 3.5.0 to before 3.5.8; 3.4.0 to before 3.4.7; 3.0.0 to before 3.0.22 | 4.0.2, 3.6.4, 3.5.8, 3.4.7, 3.0.22 | Patch available | CNA |
- OpenSSL VendorOpenSSL Affected 4.0.0 to before 4.0.2; 3.6.0 to before 3.6.4; 3.5.0 to before 3.5.8; 3.4.0 to before 3.4.7; 3.0.0 to before 3.0.22 Fixed in 4.0.2, 3.6.4, 3.5.8, 3.4.7, 3.0.22 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | 3.0.0 to before 3.0.22; 3.4.0 to before 3.4.7; 3.5.0 to before 3.5.8; 3.6.0 to before 3.6.4; 4.0.0 to before 4.0.2 | Vulnerable | OpenSSL |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.0.22; 3.4.0 to before 3.4.7; 3.5.0 to before 3.5.8; 3.6.0 to before 3.6.4; 4.0.0 to before 4.0.2 Vulnerable ·OpenSSL
Remediation
- Fix · CNA OpenSSL (OpenSSL) Fixed in 4.0.2, 3.6.4, 3.5.8, 3.4.7, 3.0.22
Red Hat 9 advisories
- RHSA-2026:67165 Released 2026-09-14 · Red Hat rating Importantopenssl security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.5.8-1.el9_8, openssl-perl-1:3.5.8-1.el9_8
- Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.5.8-1.el9_8, openssl-libs-1:3.5.8-1.el9_8
- RHSA-2026:62786 Released 2026-09-02 · Red Hat rating LowRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images ruby3.4-3.4.10-31.7.hum1@aarch64, ruby3.4-3.4.10-31.7.hum1@src, ruby3.4-3.4.10-31.7.hum1@x86_64 +10
- RHSA-2026:62563 Released 2026-09-02 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images ruby4.0-4.0.6-37.3.hum1@aarch64, ruby4.0-4.0.6-37.3.hum1@src, ruby4.0-4.0.6-37.3.hum1@x86_64 +46
Show 6 more Red Hat advisories
- RHSA-2026:62562 Released 2026-09-02 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images ruby3.3-3.3.10-23.6.hum1@aarch64, ruby3.3-3.3.10-23.6.hum1@src, ruby3.3-3.3.10-23.6.hum1@x86_64 +46
- RHSA-2026:59641 Released 2026-08-25 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images openssl-1:3.5.8-0.1.hum1@aarch64, openssl-1:3.5.8-0.1.hum1@src, openssl-1:3.5.8-0.1.hum1@x86_64 +12
- RHSA-2026:59635 Released 2026-08-25 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images openssl3-1:3.5.8-0.1.hum1@src, openssl3-devel-1:3.5.8-0.1.hum1@aarch64, openssl3-devel-1:3.5.8-0.1.hum1@x86_64 +4
- RHSA-2026:59260 Released 2026-08-25 · Red Hat rating LowRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images bootupd-0.2.36-3.hum1@aarch64, bootupd-0.2.36-3.hum1@x86_64, rust-bootupd-0.2.36-3.hum1@src
- RHSA-2026:55543 Released 2026-08-17 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images python-cryptography-50.0.0-1.hum1@src, python3-cryptography-50.0.0-1.hum1@aarch64, python3-cryptography-50.0.0-1.hum1@x86_64
- RHSA-2026:42825 Released 2026-07-21 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images chunkah-0.6.0-3.hum1@aarch64, chunkah-0.6.0-3.hum1@src, chunkah-0.6.0-3.hum1@x86_64
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
OpenSSL — openssl-library.org/news/secadv/20260825.txt
9 records Highest priority Priority MEDIUM 8 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-45027 Untrusted Sender DN Used as Format String in CMP Response ValidationPriority MEDIUM 51
- TI-2026-45030 Invalid Pointer Dereference in CMP Server via Crafted protectionAlgPriority MEDIUM 42
- TI-2026-15397 QUIC Server May Trigger Double Free When Processing INITIAL PacketPriority MEDIUM 42
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Ansible Automation Orchestrator 2026 | Affected | No fix yet: Fix deferred |
| Confidential Cluster Operator | Affected | No fix yet: Fix deferred |
| Confidential Compute Attestation | Affected | No fix yet: Fix deferred |
| Lightspeed Core | Affected | No fix yet: Fix deferred |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Applications 8 | Affected | No fix yet: Fix deferred |
| OpenShift Lightspeed | Affected | No fix yet: Fix deferred |
| OpenShift Service Mesh 3 | Affected | No fix yet: Fix deferred |
| Pen Drive Powered by Red Hat Lightspeed | Affected | No fix yet: Fix deferred |
| Red Hat Advanced Cluster Security 4 | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform Ansible Core 2 | Affected | No fix yet: Fix deferred |
| Red Hat Developer Hub 1 | Affected | No fix yet: Fix deferred |
| Red Hat Directory Server 12 | Affected | No fix yet: Fix deferred |
| Red Hat Directory Server 13 | Affected | No fix yet: Fix deferred |
| Red Hat Discovery 2 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 10 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 9 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux command line assistant | Affected | No fix yet: Fix deferred |
| Red Hat Offline Knowledge Portal | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Update Service | Affected | No fix yet: Fix deferred |
| Red Hat Quay 3 | Affected | No fix yet: Fix deferred |
| Red Hat Satellite 6 | Affected | No fix yet: Fix deferred |
| Red Hat Trusted Artifact Signer | Affected | No fix yet: Fix deferred |
| Red Hat Trusted Profile Analyzer | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:67165 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:67165 |
| Red Hat Hardened Images | Fixed | RHSA-2026:42825, RHSA-2026:55543, RHSA-2026:59260, RHSA-2026:59635, RHSA-2026:59641, RHSA-2026:62562, RHSA-2026:62563, RHSA-2026:62786 |
Not affected: 16 products
- Red Hat 3scale API Management Platform 2
- Red Hat Advanced Cluster Security 4
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform Ansible Core 2
- Red Hat Connectivity Link 1
- Red Hat Directory Server 11
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Hardened Images
- Red Hat JBoss Core Services
- Red Hat JBoss Web Server 6
- Red Hat JBoss Web Server 7
- Red Hat OpenShift Container Platform 4
- Red Hat OpenStack Platform 16.2
- Red Hat Quay 3
Timeline
- 2026-10-02 Threatist record created from CVE-2026-75803
- 2026-10-03 Alias added: GHSA-vr27-9w4v-hjw2
- 2026-10-21 Fix available: RHSA-2026:67165 · Red Hat
- 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9) · Red Hat
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
References
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2026-75803 · CVE Program
- CVE-2026-75803 · NVD
- FIRST EPSS
- GHSA-vr27-9w4v-hjw2 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-75803 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences