VDB

RHSA-2026:53416

RHSA-2026:53416 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hathost-metering-selinux-0:1.4.0-8.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-0:1.4.0-8.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-0:1.4.0-8.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-debuginfo-0:1.4.0-8.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-debugsource-0:1.4.0-8.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-0:1.4.0-8.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-debugsource-0:1.4.0-8.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7
Red Hathost-metering-debuginfo-0:1.4.0-8.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)1.4.0-8.el7

Timeline

  • Aug 11, 2026 CVE Published
  • Aug 12, 2026 CVE Updated
  • Aug 12, 2026 Distribution Patch
  • Aug 12, 2026 Distribution Patch
  • Aug 12, 2026 Security Advisory
  • Aug 12, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›