VDB
RHSA-2026:53530
RHSA-2026:53530
PUBLISHED
CVSS 9.899999618530273 CRITICAL
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
Risk Scores
CVSS 3.1
9.899999618530273
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64 as a component of Multicluster Global Hub 1.7.3 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:7f216941d795567ff74dfac6afd409716e78d6aea10c7a3e0aa1b5e13adc8120_arm64 as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9ff6b012aa9cbc584c90819143176ca55b648b56c1d744c40d5a98041586df7a_amd64 as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:35e39280cdc12086575c1540a2923988659034f155235682f6830d01997d5e54_s390x as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:e550d253bdf8540ad8825ebd43a3b83cd17fba2a53c22c344596fcdd04d4a093_arm64 as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:af5d0180164c9cfef7a111f0d27b4ab6b5d81e2caaa1a696958c02291f006184_arm64 as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4ab4a0d1ea1f0bd6e61b7a202311960129e84cb36a8922305a661a76ea8c49f7_s390x as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b7bd3cb92dc58a77f90482bb800c5a8473fd86f471939a987f213211e63e613e_ppc64le as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:b8e58493087705e33afe23d72ed351608c6f6ac22c304be09d279b71ce98a815_ppc64le as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a62de8e7ed4d12aff0caf880f3e71522ca9778bddf58f78053d3bef6ec223beb_ppc64le as a component of Multicluster Global Hub 1.7.3 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64 as a component of Multicluster Global Hub 1.7.3 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ff06c4abc43a5e345a4677ca4c0c40f9b766da47ff516f2b1ebf1ee1270a10c7_s390x as a component of Multicluster Global Hub 1.7.3 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:36257adc197f85246a68818e474c1fafae6ba1fe0be3f07b16c790fadc5324fb_amd64 as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:177214dd48325183695480f1dcdf03078054836f5bcee54ff4a26233bbd8ee37_amd64 as a component of Multicluster Global Hub 1.7.2 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:b5864bcb88d8ec81bd3fddda8eddc9daa52b5f8f45fb6384f6941b0bdde5295a_ppc64le as a component of Multicluster Global Hub 1.7.0 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ba8a184537b9ff6cd4a01cb924f0e5afeb3c356bda8261eae89a3b78db49ccfc_s390x as a component of Multicluster Global Hub 1.7.3 | * |
…and 33 more
Timeline
- Aug 11, 2026 CVE Published
- Sep 22, 2026 CVE Updated
- Sep 22, 2026 Distribution Patch
- Sep 22, 2026 Distribution Patch
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
- Sep 22, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:53530 advisory
- https://access.redhat.com/security/cve/CVE-2026-27145 advisory
- https://access.redhat.com/security/cve/CVE-2026-33376 advisory
- https://access.redhat.com/security/cve/CVE-2026-33377 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-39821 advisory
- https://access.redhat.com/security/cve/CVE-2026-42151 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42306 advisory
- https://access.redhat.com/security/cve/CVE-2026-43870 advisory
- https://access.redhat.com/security/cve/CVE-2026-46384 advisory
- https://access.redhat.com/security/cve/CVE-2026-46385 advisory
- https://access.redhat.com/security/cve/CVE-2026-53488 advisory
- https://access.redhat.com/security/cve/CVE-2026-53492 advisory
- https://access.redhat.com/security/cve/CVE-2026-55677 advisory
- https://access.redhat.com/security/cve/CVE-2026-55969 advisory
- https://access.redhat.com/security/cve/CVE-2026-66801 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53530.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484207 issue
…and 79 more