RHSA-2026:51057 | Vulnetix

RHSA-2026:51057 PUBLISHED CVSS 7.199999809265137 HIGH

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

Risk Scores

CVSS 3.1

7.199999809265137

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H

Affected Products

Vendor	Product	Versions
Red Hat	OpenShift Source To Image
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 as a component of OpenShift Developer Tools and Services 1.6.4	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le as a component of OpenShift Developer Tools and Services 1.6.2	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:c2321623908f1bbc2b353b7fd50cf30835511ef2715b00df1362edca3c8476a3_s390x as a component of OpenShift Developer Tools and Services 1.6.2	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:da07963beb33a34655d8aa1bf7c9b37b2c63d572d2689cf934243da5a2578573_ppc64le as a component of OpenShift Developer Tools and Services 1.6.4	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 as a component of OpenShift Developer Tools and Services 1.6.2	*

Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x as a component of OpenShift Developer Tools and Services 1.6.2
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:2a8a7fcaf8cb0acc0a2a66a46338887ca8a9823adc1d5fe29f2440560895ff7e_amd64 as a component of OpenShift Developer Tools and Services 1.6.2	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:fc22e7614d51d5a1f809cdea32979acec0e05361cdfd94ac773d269f473e6860_arm64 as a component of OpenShift Developer Tools and Services 1.6.4	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:3891a8717d05c5fd308ed4b3b09d53b793f5bddfadc365f7c07e597b5a14ce4d_arm64 as a component of OpenShift Developer Tools and Services 1.6.4	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:f3f19ccbae2990e1b0b5c366f880b1c1eb2a5f7515a4017f4fe6c9b089bf27d0_s390x as a component of OpenShift Developer Tools and Services 1.6.2	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:1fa54de6f9a2b2637715ba73efae4cd31eb2be55121ffdf33306d2cafc7cbdd3_ppc64le as a component of OpenShift Developer Tools and Services 1.6.3	*
Red Hat	registry.redhat.io/source-to-image/source-to-image-rhel8@sha256:165efe95829019cfa2262f929dce52ea95ff83ce495309726aad336fbdd5e346_amd64 as a component of OpenShift Developer Tools and Services 1.6.4	*

…and 7 more

Timeline

Aug 6, 2026 CVE Published
Sep 22, 2026 CVE Updated
Sep 22, 2026 Distribution Patch
Sep 22, 2026 Distribution Patch
Sep 22, 2026 Security Advisory
Sep 22, 2026 Security Advisory
Sep 22, 2026 Security Advisory
Sep 22, 2026 Security Advisory
Sep 22, 2026 Security Advisory
Sep 22, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2026:51057 advisory
https://access.redhat.com/security/cve/CVE-2026-27145 advisory
https://access.redhat.com/security/cve/CVE-2026-33811 advisory
https://access.redhat.com/security/cve/CVE-2026-41567 advisory
https://access.redhat.com/security/cve/CVE-2026-42306 advisory
https://access.redhat.com/security/cve/CVE-2026-42504 advisory
https://access.redhat.com/security/updates/classification/ advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51057.json advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 issue
https://www.cve.org/CVERecord?id=CVE-2026-27145 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 advisory
https://go.dev/cl/783621 advisory
https://go.dev/issue/79694 advisory
https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw advisory
https://pkg.go.dev/vuln/GO-2026-5037 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2467822 issue
https://www.cve.org/CVERecord?id=CVE-2026-33811 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-33811 advisory
https://go.dev/cl/767860 advisory
https://go.dev/issue/78803 advisory

…and 16 more

Open in Interactive Console →