CVE-2026-35189
- Source
- https://cve.org/CVERecord?id=CVE-2026-35189
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-35189.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-35189
- Downstream
ALPINE (1)
AZL (11)
BELL (1)
CGA (8)
DEBIAN (1)
ECHO (1)
MGASA (1)
MINI (1)
openSUSE (1)
RHSA (2)
SUSE (6)
- Related
- Published
- 2026-09-29T15:32:11Z
- Modified
- 2026-10-20T18:21:31Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- Excessive Memory Allocation in Relative CRLDP Processing
- Details
-
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions.
Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates.
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations.
The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received.
FIPS impact: no The affected code is outside the FIPS module boundary.
- Database specific
{ "cna_assigner": "openssl", "cwe_ids": [ "CWE-770" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35189.json", "unresolved_ranges": [ { "extracted_events": [ { "introduced": "3.0.0" }, { "fixed": "3.0.23" } ], "source": "AFFECTED_FIELD" } ] }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35189.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-35189
- https://openssl-library.org/news/secadv/20260929.txt
- https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84
- https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89
- https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f
- https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9
Affected packages
Git / github.com/openssl/openssl
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openssl/openssl
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "1.0.2" }, { "fixed": "1.0.2zs" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "1.1.1" }, { "fixed": "1.1.1zj" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "3.4.0" }, { "fixed": "3.4.8" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "3.5.0" }, { "fixed": "3.5.9" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "3.6.0" }, { "fixed": "3.6.5" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "4.0.0" }, { "fixed": "4.0.3" } ], "source": "CPE_RANGE" }, { "range": [ { "fixed": "2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "3842516cc15e8b2cf55747011045e77547e71d89" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "8e0efc7549b7ff8246d40e585e3fd604f728473f" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
3.*
3.4-POST-CLANG-FORMAT-WEBKIT
3.4-PRE-CLANG-FORMAT-WEBKIT
3.5-POST-CLANG-FORMAT-WEBKIT
3.5-PRE-CLANG-FORMAT-WEBKIT
3.6-POST-CLANG-FORMAT-WEBKIT
3.6-PRE-CLANG-FORMAT-WEBKIT
openssl-3.*
openssl-3.4.0
openssl-3.4.1
openssl-3.4.2
openssl-3.4.3
openssl-3.4.4
openssl-3.4.5
openssl-3.4.6
openssl-3.4.7
openssl-3.5.0
openssl-3.5.1
openssl-3.5.2
openssl-3.5.3
openssl-3.5.4
openssl-3.5.5
openssl-3.5.6
openssl-3.5.7
openssl-3.5.8
openssl-3.6.0
openssl-3.6.1
openssl-3.6.2
openssl-3.6.3
openssl-3.6.4
openssl-4.*
openssl-4.0.0
openssl-4.0.1
openssl-4.0.2
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-35189.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "312976075198056023257648111512406459987",
"length": 790
},
"id": "CVE-2026-35189-0312dd42",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "crl_crldp_check"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "227339935468626013868703201844315671629",
"length": 610
},
"id": "CVE-2026-35189-04e7d9a3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/v3_crld.c",
"function": "DIST_POINT_set_dpname"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"216664467679670621606335364402296515912",
"266453692767964220220741093170786551858",
"282826671007538788874841218581713369528",
"27674960397790421501433109872378229475",
"172587396165529481561101766025445359779",
"93298842685141806426070461874045397207",
"307411442187337519864761566645863678755",
"174961491597868375958244101453411733617"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-13831a91",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "include/crypto/x509.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"195646946100239263318549516241965631589",
"145832233679587898786810697043462740248",
"219227192546076625750289149289232517230",
"248532964545386650735765889061544899006",
"262828971789409230664603948262919002716",
"304567198698499351235404745970802344788",
"337132216041839613266177150824843236018",
"131095208850333737138266405254492856876",
"52962655222406823926589569799905586079",
"293559926987559865461870879609387346566",
"180174098870936400492941586297096097790",
"48083718200623292275172940699212000449",
"59200721452235915956019438663187347542",
"189511114327284205581881567429105705125",
"227964921383068403374943548429338008819",
"297882429076230729926466351655273565919",
"308552502143975895554508783406571966523",
"251259020958812518158671184536853527404",
"201554498700576612793010102107601060471",
"269549207514365713115291950974919950858",
"173139517382424638446749844520987643913",
"54468837067716674625735360513630338825",
"312801116497474718616862777913351878888",
"203053794428347273816487792319002187982",
"29219572445467891877809903205868774130",
"243755226202521114884883129314620457132",
"183608526470406109002873125176607488797"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-14b1f1ee",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/x509_vfy.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312976075198056023257648111512406459987",
"length": 790
},
"id": "CVE-2026-35189-14b25053",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "crl_crldp_check"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "227339935468626013868703201844315671629",
"length": 610
},
"id": "CVE-2026-35189-18169ae2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/v3_crld.c",
"function": "DIST_POINT_set_dpname"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"216664467679670621606335364402296515912",
"253591382558668881646919403652102462026",
"269504195824151513107040193868966189299",
"71733883384141311054124842491319297254",
"222856008928250583396596902089880437366",
"207932443792699369565568943484658832520",
"227361418377280519211081541396099810394"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-22a8fae9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "include/crypto/x509.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"298890490896452263478592604966255870715",
"282850506703845541289470416626662459505",
"224128252716661936284316587782315500542",
"158214664673445891709512166348460894670",
"129566505799189637012517348456832559198",
"202220850224284029202842177278743496159",
"328763756591629602549868072611627613071",
"24324791901058396819336501279805085844",
"82086597442871045692580822389855279653",
"151245769152037217695551264598157991855",
"229214022475664237099349238290285346571",
"139439575934973616620944398252427627523",
"327845991705659274769988048507748861331",
"255186331152645437971044903218613553789",
"196566496115949529089271156229578364813",
"105196753506594910027157593638165180325",
"335220381352254725247141005733919165580",
"310501940370570081095272620055710184041",
"126284659730683159811477158116606439721",
"58475042687872337265753467908324137980",
"146034629330389066985866507195780429360",
"55216695450297511227964970685354960933",
"203753971317334756524704560696593647083",
"40733163834416274302528841298854421645",
"257426339701981209332646819599390384977",
"260798655515954671899613230134771885881"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-2a96c052",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/v3_crld.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "308871831132956189341675500571335051498",
"length": 959
},
"id": "CVE-2026-35189-2c2ea574",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_dp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"333441105710647263146144482407685414957",
"153653273324503655900294894007381625506",
"238995565756008628504310246610463401524",
"312048738899477853919100999417567430862",
"18540740251551639093213728467198675303",
"205216618776523811191017637500437036086",
"301462650800295401085612650475832085069",
"292954062772505816422802552666961151648",
"98694971530851582251014190521814167445",
"24587487231920945070102293711705442912",
"331194097421586664840745728300163989853",
"204714488879032878446203991349021103243",
"6213033496966974053570278271321486141",
"105298073357406297097087456700916384190",
"319971067843482957101113348133941332175",
"297103482676649606544662925059585390118",
"7195814766305693583185581502828225524",
"52047526106048914145308714669434711235",
"12110292382501539294590051149175793930",
"145070764103280540994689456576226489876",
"124493206538727492957181885033252252771",
"217718239377887868985972560697475217691",
"111888178164455432668807141032288261698",
"159033254035419548672125949247945397921",
"263818514579416306403949255173459685815",
"130971872326367247333828029280986738474",
"210621916124483455009282098050685157800",
"326350270642072534974020308684429173705",
"268648795033488038731138900707854370766"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-2f938c09",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/v3_purp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"298890490896452263478592604966255870715",
"282850506703845541289470416626662459505",
"224128252716661936284316587782315500542",
"158214664673445891709512166348460894670",
"129566505799189637012517348456832559198",
"202220850224284029202842177278743496159",
"328763756591629602549868072611627613071",
"24324791901058396819336501279805085844",
"82086597442871045692580822389855279653",
"151245769152037217695551264598157991855",
"229214022475664237099349238290285346571",
"139439575934973616620944398252427627523",
"327845991705659274769988048507748861331",
"255186331152645437971044903218613553789",
"196566496115949529089271156229578364813",
"105196753506594910027157593638165180325",
"335220381352254725247141005733919165580",
"310501940370570081095272620055710184041",
"126284659730683159811477158116606439721",
"58475042687872337265753467908324137980",
"146034629330389066985866507195780429360",
"55216695450297511227964970685354960933",
"203753971317334756524704560696593647083",
"40733163834416274302528841298854421645",
"257426339701981209332646819599390384977",
"260798655515954671899613230134771885881"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-355e7b05",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/v3_crld.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "227339935468626013868703201844315671629",
"length": 610
},
"id": "CVE-2026-35189-49958c34",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/v3_crld.c",
"function": "DIST_POINT_set_dpname"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178644832282542722299020790796022265011",
"length": 1128
},
"id": "CVE-2026-35189-5de4a505",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "idp_check_dp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "331064990163845448695131801125641918913",
"length": 366
},
"id": "CVE-2026-35189-66604adb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_crldp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"195646946100239263318549516241965631589",
"145832233679587898786810697043462740248",
"219227192546076625750289149289232517230",
"248532964545386650735765889061544899006",
"262828971789409230664603948262919002716",
"304567198698499351235404745970802344788",
"337132216041839613266177150824843236018",
"131095208850333737138266405254492856876",
"52962655222406823926589569799905586079",
"293559926987559865461870879609387346566",
"180174098870936400492941586297096097790",
"48083718200623292275172940699212000449",
"59200721452235915956019438663187347542",
"189511114327284205581881567429105705125",
"227964921383068403374943548429338008819",
"297882429076230729926466351655273565919",
"308552502143975895554508783406571966523",
"251259020958812518158671184536853527404",
"201554498700576612793010102107601060471",
"269549207514365713115291950974919950858",
"173139517382424638446749844520987643913",
"54468837067716674625735360513630338825",
"312801116497474718616862777913351878888",
"203053794428347273816487792319002187982",
"29219572445467891877809903205868774130",
"243755226202521114884883129314620457132",
"183608526470406109002873125176607488797"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-717d3714",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/x509_vfy.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"195646946100239263318549516241965631589",
"145832233679587898786810697043462740248",
"219227192546076625750289149289232517230",
"248532964545386650735765889061544899006",
"262828971789409230664603948262919002716",
"304567198698499351235404745970802344788",
"337132216041839613266177150824843236018",
"131095208850333737138266405254492856876",
"52962655222406823926589569799905586079",
"293559926987559865461870879609387346566",
"180174098870936400492941586297096097790",
"48083718200623292275172940699212000449",
"59200721452235915956019438663187347542",
"189511114327284205581881567429105705125",
"227964921383068403374943548429338008819",
"297882429076230729926466351655273565919",
"308552502143975895554508783406571966523",
"251259020958812518158671184536853527404",
"201554498700576612793010102107601060471",
"269549207514365713115291950974919950858",
"173139517382424638446749844520987643913",
"54468837067716674625735360513630338825",
"312801116497474718616862777913351878888",
"203053794428347273816487792319002187982",
"29219572445467891877809903205868774130",
"243755226202521114884883129314620457132",
"183608526470406109002873125176607488797"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-7bc81806",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/x509_vfy.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"216664467679670621606335364402296515912",
"266453692767964220220741093170786551858",
"282826671007538788874841218581713369528",
"27674960397790421501433109872378229475",
"172587396165529481561101766025445359779",
"93298842685141806426070461874045397207",
"307411442187337519864761566645863678755",
"174961491597868375958244101453411733617"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-7c064e82",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "include/crypto/x509.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312976075198056023257648111512406459987",
"length": 790
},
"id": "CVE-2026-35189-7f5fe3da",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "crl_crldp_check"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"333441105710647263146144482407685414957",
"153653273324503655900294894007381625506",
"238995565756008628504310246610463401524",
"312048738899477853919100999417567430862",
"18540740251551639093213728467198675303",
"205216618776523811191017637500437036086",
"301462650800295401085612650475832085069",
"292954062772505816422802552666961151648",
"98694971530851582251014190521814167445",
"24587487231920945070102293711705442912",
"331194097421586664840745728300163989853",
"204714488879032878446203991349021103243",
"6213033496966974053570278271321486141",
"105298073357406297097087456700916384190",
"319971067843482957101113348133941332175",
"297103482676649606544662925059585390118",
"7195814766305693583185581502828225524",
"52047526106048914145308714669434711235",
"12110292382501539294590051149175793930",
"145070764103280540994689456576226489876",
"146982905615971315838332040865009375904",
"322513732620778408623745366468008382089",
"169948237011212156967095494156186609538",
"306878903794159793300087043752384812508",
"239380117783703745592217054157319308498",
"138566570903626086391999915927262227946",
"286377710408079517274624139381958635131",
"326350270642072534974020308684429173705",
"268648795033488038731138900707854370766"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-807553cf",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/v3_purp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"333441105710647263146144482407685414957",
"153653273324503655900294894007381625506",
"238995565756008628504310246610463401524",
"312048738899477853919100999417567430862",
"18540740251551639093213728467198675303",
"205216618776523811191017637500437036086",
"301462650800295401085612650475832085069",
"292954062772505816422802552666961151648",
"98694971530851582251014190521814167445",
"24587487231920945070102293711705442912",
"331194097421586664840745728300163989853",
"204714488879032878446203991349021103243",
"6213033496966974053570278271321486141",
"105298073357406297097087456700916384190",
"319971067843482957101113348133941332175",
"297103482676649606544662925059585390118",
"7195814766305693583185581502828225524",
"52047526106048914145308714669434711235",
"12110292382501539294590051149175793930",
"145070764103280540994689456576226489876",
"146982905615971315838332040865009375904",
"322513732620778408623745366468008382089",
"169948237011212156967095494156186609538",
"306878903794159793300087043752384812508",
"239380117783703745592217054157319308498",
"138566570903626086391999915927262227946",
"286377710408079517274624139381958635131",
"326350270642072534974020308684429173705",
"268648795033488038731138900707854370766"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-8491f394",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/v3_purp.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178644832282542722299020790796022265011",
"length": 1128
},
"id": "CVE-2026-35189-88464d62",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "idp_check_dp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "308871831132956189341675500571335051498",
"length": 959
},
"id": "CVE-2026-35189-8d77f993",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_dp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"216664467679670621606335364402296515912",
"266453692767964220220741093170786551858",
"282826671007538788874841218581713369528",
"27674960397790421501433109872378229475",
"172587396165529481561101766025445359779",
"93298842685141806426070461874045397207",
"307411442187337519864761566645863678755",
"174961491597868375958244101453411733617"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-8ff054b1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "include/crypto/x509.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "308871831132956189341675500571335051498",
"length": 959
},
"id": "CVE-2026-35189-91e2215a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_dp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"298890490896452263478592604966255870715",
"282850506703845541289470416626662459505",
"224128252716661936284316587782315500542",
"158214664673445891709512166348460894670",
"129566505799189637012517348456832559198",
"202220850224284029202842177278743496159",
"328763756591629602549868072611627613071",
"24324791901058396819336501279805085844",
"82086597442871045692580822389855279653",
"151245769152037217695551264598157991855",
"229214022475664237099349238290285346571",
"139439575934973616620944398252427627523",
"327845991705659274769988048507748861331",
"255186331152645437971044903218613553789",
"196566496115949529089271156229578364813",
"105196753506594910027157593638165180325",
"335220381352254725247141005733919165580",
"310501940370570081095272620055710184041",
"126284659730683159811477158116606439721",
"58475042687872337265753467908324137980",
"146034629330389066985866507195780429360",
"55216695450297511227964970685354960933",
"203753971317334756524704560696593647083",
"40733163834416274302528841298854421645",
"257426339701981209332646819599390384977",
"260798655515954671899613230134771885881"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-9ad5c92c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/v3_crld.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"333441105710647263146144482407685414957",
"153653273324503655900294894007381625506",
"238995565756008628504310246610463401524",
"312048738899477853919100999417567430862",
"18540740251551639093213728467198675303",
"205216618776523811191017637500437036086",
"301462650800295401085612650475832085069",
"292954062772505816422802552666961151648",
"98694971530851582251014190521814167445",
"24587487231920945070102293711705442912",
"331194097421586664840745728300163989853",
"204714488879032878446203991349021103243",
"6213033496966974053570278271321486141",
"105298073357406297097087456700916384190",
"319971067843482957101113348133941332175",
"297103482676649606544662925059585390118",
"7195814766305693583185581502828225524",
"52047526106048914145308714669434711235",
"12110292382501539294590051149175793930",
"145070764103280540994689456576226489876",
"146982905615971315838332040865009375904",
"322513732620778408623745366468008382089",
"169948237011212156967095494156186609538",
"306878903794159793300087043752384812508",
"239380117783703745592217054157319308498",
"138566570903626086391999915927262227946",
"286377710408079517274624139381958635131",
"326350270642072534974020308684429173705",
"268648795033488038731138900707854370766"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-a52332d1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/v3_purp.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "312976075198056023257648111512406459987",
"length": 790
},
"id": "CVE-2026-35189-a564494f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "crl_crldp_check"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178644832282542722299020790796022265011",
"length": 1128
},
"id": "CVE-2026-35189-a7a05862",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "idp_check_dp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "331064990163845448695131801125641918913",
"length": 366
},
"id": "CVE-2026-35189-bec9fbf5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_crldp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"28170854778703993674264004058177114599",
"73132526844288570625317440636111911761",
"177405411499435185068645597737938634778",
"224809958623850711330610094965797758930",
"295554444428855106393106961197201359586"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-c377fa22",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
"target": {
"file": "include/openssl/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"298890490896452263478592604966255870715",
"282850506703845541289470416626662459505",
"224128252716661936284316587782315500542",
"158214664673445891709512166348460894670",
"129566505799189637012517348456832559198",
"202220850224284029202842177278743496159",
"328763756591629602549868072611627613071",
"24324791901058396819336501279805085844",
"82086597442871045692580822389855279653",
"151245769152037217695551264598157991855",
"229214022475664237099349238290285346571",
"139439575934973616620944398252427627523",
"327845991705659274769988048507748861331",
"255186331152645437971044903218613553789",
"196566496115949529089271156229578364813",
"105196753506594910027157593638165180325",
"335220381352254725247141005733919165580",
"310501940370570081095272620055710184041",
"126284659730683159811477158116606439721",
"58475042687872337265753467908324137980",
"146034629330389066985866507195780429360",
"55216695450297511227964970685354960933",
"203753971317334756524704560696593647083",
"40733163834416274302528841298854421645"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-c442a90e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9",
"target": {
"file": "crypto/x509/v3_crld.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "331064990163845448695131801125641918913",
"length": 366
},
"id": "CVE-2026-35189-ccbd5eb6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_crldp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"195646946100239263318549516241965631589",
"145832233679587898786810697043462740248",
"219227192546076625750289149289232517230",
"248532964545386650735765889061544899006",
"262828971789409230664603948262919002716",
"304567198698499351235404745970802344788",
"337132216041839613266177150824843236018",
"131095208850333737138266405254492856876",
"52962655222406823926589569799905586079",
"293559926987559865461870879609387346566",
"180174098870936400492941586297096097790",
"48083718200623292275172940699212000449",
"59200721452235915956019438663187347542",
"189511114327284205581881567429105705125",
"227964921383068403374943548429338008819",
"297882429076230729926466351655273565919",
"308552502143975895554508783406571966523",
"251259020958812518158671184536853527404",
"201554498700576612793010102107601060471",
"269549207514365713115291950974919950858",
"173139517382424638446749844520987643913",
"54468837067716674625735360513630338825",
"312801116497474718616862777913351878888",
"203053794428347273816487792319002187982",
"29219572445467891877809903205868774130",
"243755226202521114884883129314620457132",
"183608526470406109002873125176607488797"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-e02f7b40",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/x509_vfy.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251633914150035957322733061977107206211",
"338514574181828579838011565939158652696",
"76638288692106140328510055542557597351",
"142922657400765574308962710386922248045",
"71649992455794854055653842592139575350",
"65527166711110472566013424527579064967",
"253196866009476977787139000804413898733",
"172177136897997206866313011107384691461"
],
"threshold": 0.9
},
"id": "CVE-2026-35189-e051451f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
"target": {
"file": "crypto/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178644832282542722299020790796022265011",
"length": 1128
},
"id": "CVE-2026-35189-f3ea1a13",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/x509_vfy.c",
"function": "idp_check_dp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "227339935468626013868703201844315671629",
"length": 610
},
"id": "CVE-2026-35189-f5277534",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/v3_crld.c",
"function": "DIST_POINT_set_dpname"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "308871831132956189341675500571335051498",
"length": 959
},
"id": "CVE-2026-35189-f55e1fea",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f",
"target": {
"file": "crypto/x509/v3_purp.c",
"function": "setup_dp"
}
}
]
vanir_signatures_modified
"2026-10-20T18:21:31Z"