CVE-2026-81687 - openssl_encrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-13108 [未知] CVE-2026-13108 - WatchGuard Dimension is susceptible to a denial-of-se…
• CVE-2026-81725 [低危] CVE-2026-81725 - NLTK before 3.10.3 contains a regular expression deni…
• CVE-2026-81723 [低危] CVE-2026-81723 - NLTK versions before 3.10.3 contain a quadratic CPU e…
• CVE-2026-81721 [高危] CVE-2026-81721 - openssl_encrypt before 1.4.9 fails to validate KDF co…
• CVE-2026-81720 [中危] CVE-2026-81720 - openssl_encrypt before 1.4.9 fails to validate the me…
• CVE-2026-81687 [中危] CVE-2026-81687 - openssl_encrypt versions before 1.4.9 fail to enforce…
• CVE-2026-47886 [高危] CVE-2026-47886 - Applications that evaluate user-supplied Spring Expre…
• CVE-2026-47881 [中危] CVE-2026-47881 - Spring Batch's FlatFileItemReader supports files wher…