Vulnerability details

CVE-2026-32280

Go standard library crypto/x509Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat Deployment Validation OperatorRed Hat External Secrets Operator for Red Hat OpenShiftRed Hat ExternalDNS Operator

Unexpected work during chain building in crypto/x509

CVSS 3.1
7.5High

Official description

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

CVSS scores

ScoreVersionSourceVector
7.5High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5High 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersionsSource
Go standard library crypto/x509 v < 1.25.9 CVEProject cvelistV5 (CNA)
Go standard library crypto/x509 1.26.0-0 ≤ v < 1.26.2 CVEProject cvelistV5 (CNA)
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 All CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation All CVEProject cvelistV5 (CNA)
Red Hat Confidential Compute Attestation All CVEProject cvelistV5 (CNA)
Red Hat Deployment Validation Operator All CVEProject cvelistV5 (CNA)
Red Hat External Secrets Operator for Red Hat OpenShift All CVEProject cvelistV5 (CNA)
Red Hat ExternalDNS Operator All CVEProject cvelistV5 (CNA)
Red Hat Fence Agents Remediation Operator All CVEProject cvelistV5 (CNA)
Red Hat File Integrity Operator All CVEProject cvelistV5 (CNA)
Red Hat Gatekeeper 3 All CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift All CVEProject cvelistV5 (CNA)
Red Hat Logging Subsystem for Red Hat OpenShift All CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage All CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage All CVEProject cvelistV5 (CNA)
Red Hat Logical Volume Manager Storage All CVEProject cvelistV5 (CNA)
Red Hat Machine Deletion Remediation Operator All CVEProject cvelistV5 (CNA)
Red Hat Multicluster Engine for Kubernetes All CVEProject cvelistV5 (CNA)
Red Hat Node HealthCheck Operator All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Developer Tools and Services All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Lightspeed All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Pipelines All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless All CVEProject cvelistV5 (CNA)
Red Hat OpenShift Serverless All CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat 3scale API Management Platform 2 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Connectivity Link 1 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 7 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Cluster Manager CLI All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Container Platform 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Dev Workspaces Operator All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift GitOps All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift Virtualization 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift on AWS All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 16.2 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 17.1 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenStack Platform 17.1 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Openshift Data Foundation 4 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Satellite 6 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Satellite 6 All CVEProject cvelistV5 (CNA)
Red Hat Security Profiles Operator All CVEProject cvelistV5 (CNA)
Red Hat Zero Trust Workload Identity Manager All CVEProject cvelistV5 (CNA)
Red Hat Zero Trust Workload Identity Manager - Tech Preview All CVEProject cvelistV5 (CNA)
Red Hat cert-manager Operator for Red Hat OpenShift All CVEProject cvelistV5 (CNA)
Red Hat mirror registry for Red Hat OpenShift All CVEProject cvelistV5 (CNA)

References and advisories

198
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-04-08
Last updated
2026-09-18
State
Published
Assigner (CNA)
Go

Exploit prediction (EPSS)

0.62%
Probability of exploitation in 30 days
50.2%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-770
    Allocation of Resources Without Limits or Throttling