Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade cni-plugins-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golistUpgrade rclone-debuginfoUpgrade cri-toolsUpgrade amazon-ecr-credential-helperUpgrade golist-debuginfoUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade containerdUpgrade docker-debuginfoUpgrade golang-srcUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade oci-add-hooksUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade runc-debuginfoUpgrade dockerUpgrade cri-tools-debuginfoUpgrade golang-testsUpgrade rcloneUpgrade golang-docsUpgrade golangUpgrade cni-pluginsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runcUpgrade golang-miscUpgrade runfinch-finchUpgrade containerd-stressUpgrade golang-bin | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade amazon-ssm-agentUpgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-srcUpgrade golang-miscUpgrade git-lfs-debugsourceUpgrade git-lfs-debuginfoUpgrade git-lfsUpgrade golang | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25-docUpgrade go1.24Upgrade go1.25Upgrade go1.24-raceUpgrade go1.25-raceUpgrade go1.24-doc | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub