Beveiligingsadvies

CVE-2026-27145

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-02 22:01:36

Laatst bijgewerkt 2026-09-09 12:04:45

Toegewezen door Go

CVSS-score 6.5

Status PUBLISHED

Beschrijving

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

← Alle CVE's bekijken Bekijk op cve.org ↗