A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade delveUpgrade golang-docsUpgrade go-toolsetUpgrade golang-bin | Apr 11, 2025 | Jan 28, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jan 28, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-docsUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-sharedUpgrade golang-misc | Mar 27, 2025 | Jan 28, 2025 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-binUpgrade golang-misc | Mar 10, 2025 | Jan 17, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | May 15, 2025 | Jan 28, 2025 |
| Freebsd | — | Upgrade go123Upgrade go122 | Dec 10, 2025 | Jan 21, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 11, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 21, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 1, 2025 | Jan 28, 2025 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade golang-binUpgrade golang-docsUpgrade delveUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-src | Apr 11, 2025 | Jan 17, 2025 |
| Redhat_linux | — | Upgrade golang-srcUpgrade delveUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-raceUpgrade golang-miscUpgrade golang-binUpgrade delve-debugsourceUpgrade golangUpgrade golang-testsUpgrade golang-docsNo solution exists | Apr 14, 2025 | Jan 28, 2025 |
| Rocky_linux | — | Upgrade delveUpgrade delve-debugsourceUpgrade golangUpgrade go-toolsetUpgrade golang-binUpgrade delve-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade go1.23-openssl-raceUpgrade go1.22-raceUpgrade go1.23Upgrade go1.24-openssl-raceUpgrade govulncheck-vulndbUpgrade go1.22-openssl-raceUpgrade go1.22-opensslUpgrade go1.24-docUpgrade go1.24-opensslUpgrade go1.23-openssl-docUpgrade go1.23-docUpgrade go1.22-openssl-docUpgrade go1.24Upgrade go1.23-raceUpgrade go1.23-opensslUpgrade go1.22-docUpgrade go1.22Upgrade go1.24-libstdUpgrade go1.24-race | Dec 5, 2025 | Apr 11, 2025 |
| Ubuntu | — | Upgrade golang-1.22Upgrade golang-1.22-goUpgrade golang-1.22-src | Jun 20, 2025 | Jan 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jan 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub