CVE-2026-84784: 
OpenSSL vulnerability analysis and mitigation

CVE-2026-84784 is a denial-of-service vulnerability in OpenSSL's QUIC stack, formally titled "OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog." A malicious remote peer can flood the local QUIC stack with NEW_CONNECTION_ID frames by bypassing a limit check on connection IDs, forcing the local stack to allocate approximately 400MB of memory when ACKs are withheld. Affected versions include OpenSSL 3.4.0–3.4.7, 3.5.0–3.5.8, 3.6.0–3.6.4, and 4.0.0–4.0.2. The vulnerability was disclosed on September 29, 2026, and carries a CVSS v3.1 base score of 7.5 (High) (Red Hat Advisory, Red Hat Bugzilla).

The root cause is CWE-770 (Allocation of Resources Without Limits or Throttling) in OpenSSL's QUIC channel implementation (ssl/quic/quic_channel.c). Per RFC 9000, when a remote peer sends a NEW_CONNECTION_ID frame with a retire-prior-to value, the local stack must send a RETIRE_CONNECTION_ID frame for each connection ID whose sequence number falls below that threshold, and only update the cur_retire_prior_to counter after receiving an ACK for those frames. The vulnerable code incorrectly incremented cur_retire_prior_to immediately upon dispatching RETIRE_CONNECTION_ID frames to the Control Frame Queue (CFQ), rather than waiting for ACK confirmation. This allowed a malicious peer to repeatedly send NEW_CONNECTION_ID frames with escalating retire-prior-to values while withholding ACKs, causing an unbounded backlog of RETIRE_CONNECTION_ID frames to accumulate in the CFQ and exhaust memory (Red Hat Bugzilla, OpenSSL Commit).

Successful exploitation results in a denial-of-service condition affecting availability only — there is no confidentiality or integrity impact. An unauthenticated remote attacker can force the vulnerable OpenSSL QUIC stack to allocate approximately 400MB of memory (varying with ACK delay), potentially exhausting system memory and crashing QUIC-based connections or services. The FIPS module is not affected, as the QUIC implementation resides outside the OpenSSL FIPS module boundary (Red Hat Bugzilla, Red Hat Advisory).

No public proof-of-concept exploit code is known to exist, and there is no evidence of in-the-wild exploitation at this time (Red Hat Advisory). The vulnerability is network-exploitable with no authentication or user interaction required, and NVD's SSVC assessment marks it as automatable. The EPSS score is approximately 0.40%, indicating a relatively low probability of exploitation in the near term. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

1. Establish a QUIC connection: Initiate a QUIC connection to a target service running a vulnerable version of OpenSSL (3.4.0–3.4.7, 3.5.0–3.5.8, 3.6.0–3.6.4, or 4.0.0–4.0.2).
2. Send NEW_CONNECTION_ID frames with escalating retire-prior-to values: Craft and transmit a high volume of NEW_CONNECTION_ID frames, each with an incrementally higher retire-prior-to sequence number, exploiting the missing limit check on how many connection IDs the remote stack can request to retire.
3. Withhold ACKs: Suppress ACK frames from the attacker's side so the local stack never receives confirmation that its RETIRE_CONNECTION_ID frames were received, preventing the cur_retire_prior_to counter from advancing and keeping the backlog growing.
4. Exhaust memory: The local QUIC stack enqueues a RETIRE_CONNECTION_ID frame in the CFQ for each NEW_CONNECTION_ID received, accumulating ~400MB of memory allocations (depending on ACK delay) and causing a denial-of-service condition (Red Hat Bugzilla, OpenSSL Commit).

• Network: Unusually high volume of QUIC NEW_CONNECTION_ID frames from a single remote peer; absence of corresponding ACK frames from the remote peer during an active QUIC session; sustained QUIC traffic with escalating connection ID sequence numbers.
• System: Rapid and sustained growth in memory consumption by the process hosting the OpenSSL QUIC stack; out-of-memory (OOM) events or process crashes in QUIC-enabled services.
• Logs: Application or system logs showing memory allocation failures or OOM kills for QUIC-based services; error messages referencing OSSL_QUIC_FRAME_TYPE_RETIRE_CONN_ID or internal CFQ errors in OpenSSL debug output.

OpenSSL has released patched versions addressing this vulnerability: 3.4.8, 3.5.9, 3.6.5, and 4.0.3. Upgrading to the appropriate patched release is the recommended remediation (OpenSSL Advisory). As a temporary network-level workaround where immediate patching is not feasible, consider implementing rate limiting or filtering for QUIC NEW_CONNECTION_ID frames at the network perimeter. Linux distributions including Red Hat, Ubuntu (USN-8847-1), SUSE (SUSE-SU-2026:4414-1), and Amazon Linux 2023 have issued updated packages (Red Hat Advisory, Ubuntu Advisory).

The vulnerability was covered by security news outlets including SecurityOnline and CyberPress in the context of OpenSSL's September 2026 security release, which addressed 14 security flaws across QUIC, DTLS, and SM2 components (SecurityOnline, CyberPress). Multiple Linux distributions responded promptly with updated packages, and Tenable released Nessus detection plugins shortly after disclosure. No notable individual researcher commentary or significant social media discussion specific to this CVE has been identified.