جزئیات آسیب‌پذیری
CVE-2026-27137
Go standard library crypto/x509Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat Deployment Validation OperatorRed Hat ExternalDNS OperatorRed Hat Fence Agents Remediation Operator
Incorrect enforcement of email constraints in crypto/x509
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Go standard library | crypto/x509 | 1.26.0-0 ≤ v < 1.26.1 | CVEProject cvelistV5 (CNA) |
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Deployment Validation Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Fence Agents Remediation Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Gatekeeper 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat 3scale API Management Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Connectivity Link 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Developer Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 8 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Cluster Manager CLI | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift on AWS | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 16.2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenStack Platform 18.0 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Openshift Data Foundation 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | mirror registry for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | streams for Apache Kafka 3 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۶۷- https://go.dev/cl/752182
- https://go.dev/issue/77952
- https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
- https://pkg.go.dev/vuln/GO-2026-4599
- https://access.redhat.com/security/cve/CVE-2026-27137 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2445345 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28047 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39810 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49703 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49702 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67517 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56143 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10929 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8842 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10169 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22937 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19049 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22450 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19132 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61253 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67160 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57649 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67159 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67518 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56223 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28038 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19181 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23228 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22714 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5549 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9872 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22862 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11800 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26585 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22423 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22347 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23345 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29854 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26568 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8151 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13545 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7291 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9052 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10184 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10158 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10175 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9697 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9698 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9699 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9385 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14879 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10125 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10250 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10225 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8338 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8337 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8167 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5110 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21769 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۱۶
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Go
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۶٪
احتمال بهره‌برداری در ۳۰ روز
۵۱٫۸٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-295Improper Certificate Validation