Denial of Service Vulnerability in utcp Package for OCaml
CVE-2026-87734

7.5HIGH

Key Information:

Vendor

Ocaml

Status
Utcp
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87734?

A vulnerability has been identified in the utcp package for OCaml, allowing remote attackers to exploit out-of-order segment reassembly. This can lead to a denial of service, impacting the availability of services relying on this package. It is crucial for users to upgrade to at least version 0.0.6 to mitigate this risk.

Affected Version(s)

utcp 0 < 0.0.6

References

https://osv.dev/vulnerability/OSEC-2026-11

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.