Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade rclone-debuginfoUpgrade containerd-stressUpgrade golang-testsUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade nerdctl-debuginfoUpgrade nerdctlUpgrade amazon-ssm-agentUpgrade oci-add-hooks-debuginfoUpgrade cni-pluginsUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade ecs-initUpgrade runcUpgrade amazon-cloudwatch-agentUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade cri-toolsUpgrade oci-add-hooksUpgrade golang-srcUpgrade golist-debuginfoUpgrade rcloneUpgrade golangUpgrade cri-tools-debuginfoUpgrade golang-miscUpgrade soci-snapshotterUpgrade golistUpgrade docker | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade amazon-ecr-credential-helperUpgrade golangUpgrade golang-miscUpgrade cni-plugins-debuginfoUpgrade libcap-debugsourceUpgrade libcap-debuginfoUpgrade runfinch-finchUpgrade captree-debuginfoUpgrade golang-srcUpgrade libcap-develUpgrade ecs-initUpgrade captreeUpgrade golang-docsUpgrade golang-sharedUpgrade cni-pluginsUpgrade cni-plugins-debugsourceUpgrade libcapUpgrade golang-binUpgrade amazon-ssm-agentUpgrade libcap-staticUpgrade golang-tests | Oct 31, 2025 | Oct 29, 2025 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.0.4 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25Upgrade go1.24-raceUpgrade go1.24-docUpgrade go1.25-docUpgrade go1.25-raceUpgrade go1.24 | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub