CVE-2026-75806

A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service (DoS) by terminating an active Datagram Transport Layer Security (DTLS) session. By sending an undersized network packet that is shorter than the expected cryptographic overhead, the record processing layer fails to validate the packet length and misinterprets the packet as an internal error rather than an authentication failure. This improper handling triggers a fatal alert that unexpectedly closes the targeted connection without requiring valid encryption keys.

This issue is rated Moderate because an unauthenticated undersized DTLS 1.2 AEAD record can trigger a denial-of-service condition in the DTLS stack. There is no confidentiality or integrity impact expected for typical deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If DTLS is not required, disable DTLS listeners and prefer TLS over reliable transports. Restrict untrusted DTLS/UDP peers at the network edge.