Към съдържанието
Търсене

CVE-2026-33810: Go standard library crypto/x509, невалидиран вход

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Засегнати продукти

  • Go standard library crypto/x509: 1.26.0-0 преди 1.26.2
  • Red Hat Cryostat 4 on RHEL 9: 4.1.1-7 преди *
  • Red Hat HawtIO HawtIO 4.4.0: operator-container преди *
  • Red Hat Red Hat Enterprise Linux 10: 0:0.144.0-2.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:0.2.3-5.el10_0 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 8060020260803064027.ad008a3a преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 8060020260803064027.ad008a3a преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:75-10.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:75-10.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:0.144.0-2.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:1.26.5-1.el9_2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: 0:0.144.0-2.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 2:1.33.15-1.el9_4.1 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:0.144.0-2.el9_6 преди *
  • Red Hat Red Hat OpenStack Platform 16.2: 0:0.2.1-1.1.el8ost преди *
  • Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9: 0:3.4.26-9.5.el9ost преди *
  • Red Hat Red Hat OpenStack Services on OpenShift 18.0: 0:0.1.1-18.0.20260602234716.a95ae05.el9ost преди *
  • Red Hat Red Hat Satellite 6.19 for RHEL 9: 0:0.0.3-5.el9sat преди *
  • Red Hat RHEM 1.0 for RHEL 9: 0:1.0.3-1.el9em преди *
  • Red Hat RHEM 1.1 for RHEL 10: 0:1.1.4-1.el10em преди *
  • Red Hat RHEM 1.1 for RHEL 9: 0:1.1.4-1.el9em преди *
  • Red Hat Builds for Red Hat OpenShift 1.6.0: 1776847666 преди *
  • Red Hat Compliance Operator 1: 1781605005 преди *
  • Red Hat Logging for Red Hat OpenShift 6: 1781192891 преди *
  • Red Hat Logging for Red Hat OpenShift 6.2: 1784747813 преди *
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.4: 1780051640 преди *
  • Red Hat Multicluster Global Hub 1.4.5: 1779838819 преди *
  • Red Hat Multicluster Global Hub 1.6.5: 1780320809 преди *
  • Red Hat OpenShift API for Data Protection 1.3: 1785180878 преди *
  • Red Hat OpenShift API for Data Protection 1.4: 1779809598 преди *
  • Red Hat OpenShift API for Data Protection 1.5: 1779808027 преди *
  • Red Hat Red Hat Ansible Automation Platform 2.6: 1777391542 преди *
  • Red Hat Red Hat Edge Manager 1.0: 1783502438 преди *
  • Red Hat Red Hat Edge Manager 1.1: 1784194574 преди *
  • Red Hat Red Hat Hardened Images: 1.26.2-1.hum1 преди *
  • Red Hat Red Hat Lightspeed (formerly Insights) for Runtimes 1.0: 1.0.3-1779996197 преди *
  • Red Hat Red Hat Migration Toolkit 1.8: 1783914276 преди *
  • Red Hat Red Hat multicluster global hub 1.5.3: 1779828691 преди *
  • Red Hat Red Hat OpenShift AI 2.25: 1788232548 преди *
  • Red Hat Red Hat OpenShift Builds 1.7.3: 1776846936 преди *
  • Red Hat Red Hat OpenShift Dev Spaces 3.28: 1779829736 преди *
  • Red Hat Red Hat OpenShift distributed tracing 3.9.3: 1776435680 преди *
  • Red Hat Red Hat Trusted Artifact Signer 1.3: 1780399582 преди *
  • Red Hat Red Hat Web Terminal 1.11: 1780423339 преди *; 1784296203 преди *
  • Red Hat Red Hat Web Terminal 1.12: 1780425077 преди *; 1784247610 преди *
  • Red Hat Red Hat Web Terminal 1.13: 1780425080 преди *; 1784296127 преди *
  • Red Hat Red Hat Web Terminal 1.14: 1780424928 преди *; 1784296114 преди *
  • Red Hat Red Hat Web Terminal 1.15: 1780424829 преди *; 1784296033 преди *
  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2
  • Red Hat cert-manager Operator for Red Hat OpenShift
  • Red Hat Confidential Compute Attestation
  • Red Hat Custom Metric Autoscaler operator for Red Hat Openshift
  • Red Hat Deployment Validation Operator
  • Red Hat ExternalDNS Operator
  • Red Hat External Secrets Operator for Red Hat OpenShift
  • Red Hat Fence Agents Remediation Operator
  • Red Hat File Integrity Operator
  • Red Hat Gatekeeper 3
  • Red Hat Logging Subsystem for Red Hat OpenShift
  • Red Hat Logical Volume Manager Storage
  • Red Hat Machine Deletion Remediation Operator
  • Red Hat Migration Toolkit for Applications 8
  • Red Hat mirror registry for Red Hat OpenShift
  • Red Hat mirror registry for Red Hat OpenShift 2
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Network Observability Operator
  • Red Hat Node HealthCheck Operator
  • Red Hat OpenShift Developer Tools and Services
  • Red Hat OpenShift Lightspeed
  • Red Hat OpenShift Pipelines
  • Red Hat OpenShift Serverless
  • Red Hat OpenShift Service Mesh 2
  • Red Hat OpenShift Service Mesh 3
  • Red Hat Power monitoring for Red Hat OpenShift
  • Red Hat Red Hat 3scale API Management Platform 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Security 4
  • Red Hat Red Hat AI Inference Server
  • Red Hat Red Hat Ansible Automation Platform 2
  • Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
  • Red Hat Red Hat Connectivity Link 1
  • Red Hat Red Hat Developer Hub
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat OpenShift Cluster Manager CLI
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat Openshift Data Foundation 4
  • Red Hat Red Hat OpenShift Dev Workspaces Operator
  • Red Hat Red Hat OpenShift for Windows Containers
  • Red Hat Red Hat OpenShift GitOps
  • Red Hat Red Hat OpenShift on AWS
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenStack Platform 17.1
  • Red Hat Red Hat OpenStack Platform 18.0
  • Red Hat Red Hat Quay 3
  • Red Hat Red Hat Satellite 6
  • Red Hat Red Hat Service Interconnect 1
  • Red Hat Red Hat Service Interconnect 2
  • Red Hat Security Profiles Operator
  • Red Hat Service Telemetry Framework 1.5
  • Red Hat streams for Apache Kafka 3
  • Red Hat Zero Trust Workload Identity Manager
  • Red Hat Zero Trust Workload Identity Manager - Tech Preview

Вид слабост

История

  • 8 април 2026 Публикувано

Други уязвимости в Go standard library crypto/x509

Първоизточници

CVE-2026-33810: Go standard library crypto/x509, невалидиран вход | freedomonline.bg