7.5
High
CVE-2026-32280 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…
Description
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| crypto/x509 1.26 | 1.26.0-0 → < 1.26.2 | 1.26.2 |
| crypto/x509 1.25 | earliest → < 1.25.9 | 1.25.9 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Versions not published | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Versions not published | |
| Red Hat OpenShift Container Platform 4.18 1786754425 | earliest → < 1786754425 | 1786754425 |
| Red Hat Satellite 6.16 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Versions not published |
Show the 191 other branches Hide the 191 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cryostat 4 on RHEL 9 4.1 | earliest → < 4.1.1-7 | 4.1.1-7 |
| Red Hat OpenStack Platform 17.1 | Versions not published | |
| Red Hat OpenShift Container Platform 4.19 1787105202 | earliest → < 1787105202 | 1787105202 |
| Red Hat Satellite 6.16 for RHEL 9 | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Versions not published | |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Versions not published | |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Versions not published | |
| Custom Metric Autoscaler 2.19 1780101239 | earliest → < 1780101239 | 1780101239 |
| HawtIO HawtIO 4.4.0 | Versions not published | |
| Logging Subsystem for Red Hat OpenShift 6.0 1781192891 | earliest → < 1781192891 | 1781192891 |
| Logging Subsystem for Red Hat OpenShift 6.4 1780051640 | earliest → < 1780051640 | 1780051640 |
| Multicluster Global Hub 1.4.5 1779838819 | earliest → < 1779838819 | 1779838819 |
| Multicluster Global Hub 1.5.4 1779828691 | earliest → < 1779828691 | 1779828691 |
| Multicluster Global Hub 1.6.2 1780320809 | earliest → < 1780320809 | 1780320809 |
| Network Observability (NETOBSERV) 1.11.2 1778508501 | earliest → < 1778508501 | 1778508501 |
| OpenShift API for Data Protection 1.4 1779809598 | earliest → < 1779809598 | 1779809598 |
| OpenShift API for Data Protection 1.5 1779808027 | earliest → < 1779808027 | 1779808027 |
| OpenShift Compliance Operator 1 1781605005 | earliest → < 1781605005 | 1781605005 |
| Red Hat Advanced Cluster Management for Kubernetes 2.14 1780238563 | earliest → < 1780238563 | 1780238563 |
| Red Hat Advanced Cluster Security for Kubernetes 4.10 1782891789 | earliest → < 1782891789 | 1782891789 |
| Red Hat Advanced Cluster Security for Kubernetes 4.10 1778755463 | earliest → < 1778755463 | 1778755463 |
| Red Hat Advanced Cluster Security for Kubernetes 4.9 1782891812 | earliest → < 1782891812 | 1782891812 |
| Red Hat Ansible Automation Platform 2.6 1777391542 | earliest → < 1777391542 | 1777391542 |
| Red Hat Developer Hub 1.8 1779841292 | earliest → < 1779841292 | 1779841292 |
| Red Hat Developer Hub 1.9 1777902709 | earliest → < 1777902709 | 1777902709 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1 1.0 | earliest → < 1.0.3-1779996197 | 1.0.3-1779996197 |
| Red Hat OpenShift AI 2.25 1780513840 | earliest → < 1780513840 | 1780513840 |
| Red Hat OpenShift Builds 1.7.3 1780374228 | earliest → < 1780374228 | 1780374228 |
| Red Hat OpenShift Dev Spaces 3.28 1779829736 | earliest → < 1779829736 | 1779829736 |
| Red Hat OpenShift Service Mesh 2.6 1778191378 | earliest → < 1778191378 | 1778191378 |
| Red Hat OpenShift Service Mesh 3.0 1778164208 | earliest → < 1778164208 | 1778164208 |
| Red Hat OpenShift Service Mesh 3.1 1778164042 | earliest → < 1778164042 | 1778164042 |
| Red Hat OpenShift Service Mesh 3.2 1778163909 | earliest → < 1778163909 | 1778163909 |
| Red Hat OpenShift Service Mesh 3.3 1778163986 | earliest → < 1778163986 | 1778163986 |
| Red Hat OpenShift distributed tracing 3.9.3 1776435680 | earliest → < 1776435680 | 1776435680 |
| Red Hat OpenStack 1.5 1777452570 | earliest → < 1777452570 | 1777452570 |
| Red Hat Quay 3.14 1779689392 | earliest → < 1779689392 | 1779689392 |
| Red Hat Quay 3.15 1780891395 | earliest → < 1780891395 | 1780891395 |
| Red Hat Quay 3.16 1779204086 | earliest → < 1779204086 | 1779204086 |
| Red Hat Quay 3.17 1779922205 | earliest → < 1779922205 | 1779922205 |
| Red Hat Quay 3.1 1779822261 | earliest → < 1779822261 | 1779822261 |
| Red Hat Quay 3.9 1779811473 | earliest → < 1779811473 | 1779811473 |
| Red Hat Trusted Artifact Signer 1.3 1780399582 | earliest → < 1780399582 | 1780399582 |
| Red Hat Web Terminal 1.11 1784296203 | earliest → < 1784296203 | 1784296203 |
| Red Hat Web Terminal 1.11 1780423339 | earliest → < 1780423339 | 1780423339 |
| Red Hat Web Terminal 1.12 1784247610 | earliest → < 1784247610 | 1784247610 |
| Red Hat Web Terminal 1.12 1780425077 | earliest → < 1780425077 | 1780425077 |
| Red Hat Web Terminal 1.13 1784296127 | earliest → < 1784296127 | 1784296127 |
| Red Hat Web Terminal 1.13 1780425080 | earliest → < 1780425080 | 1780425080 |
| Red Hat Web Terminal 1.14 1784296114 | earliest → < 1784296114 | 1784296114 |
| Red Hat Web Terminal 1.14 1780424928 | earliest → < 1780424928 | 1780424928 |
| Red Hat Web Terminal 1.15 1784296033 | earliest → < 1784296033 | 1784296033 |
| Red Hat Web Terminal 1.15 1780424829 | earliest → < 1780424829 | 1780424829 |
| mirror registry for Red Hat OpenShift 2.0 1782177012 | earliest → < 1782177012 | 1782177012 |
| multicluster engine for Kubernetes 2.10 1780106633 | earliest → < 1780106633 | 1780106633 |
| multicluster engine for Kubernetes 2.11 1779991600 | earliest → < 1779991600 | 1779991600 |
| multicluster engine for Kubernetes 2.17 1780297056 | earliest → < 1780297056 | 1780297056 |
| multicluster engine for Kubernetes 2.6 1782207490 | earliest → < 1782207490 | 1782207490 |
| multicluster engine for Kubernetes 2.8 1779910129 | earliest → < 1779910129 | 1779910129 |
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Versions not published | |
| cert-manager Operator for Red Hat OpenShift | Versions not published | |
| Confidential Compute Attestation | Versions not published | |
| Deployment Validation Operator | Versions not published | |
| External Secrets Operator for Red Hat OpenShift | Versions not published | |
| ExternalDNS Operator | Versions not published | |
| Fence Agents Remediation Operator | Versions not published | |
| File Integrity Operator | Versions not published | |
| Gatekeeper 3 | Versions not published | |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Logical Volume Manager Storage | Versions not published | |
| Migration Toolkit for Applications 8 | Versions not published | |
| Migration Toolkit for Containers | Versions not published | |
| mirror registry for Red Hat OpenShift | Versions not published | |
| Multicluster Engine for Kubernetes | Versions not published | |
| Node HealthCheck Operator | Versions not published | |
| OpenShift Developer Tools and Services | Versions not published | |
| OpenShift Lightspeed | Versions not published | |
| OpenShift Pipelines | Versions not published | |
| OpenShift Serverless | Versions not published | |
| Red Hat 3scale API Management Platform 2 | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published | |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Connectivity Link 1 | Versions not published | |
| Red Hat Edge Manager 1 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat OpenShift Cluster Manager CLI | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat Openshift Data Foundation 4 | Versions not published | |
| Red Hat OpenShift Dev Workspaces Operator | Versions not published | |
| Red Hat OpenShift GitOps | Versions not published | |
| Red Hat OpenShift on AWS | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published | |
| Red Hat OpenStack Platform 16.2 | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Red Hat Satellite 6 | Versions not published | |
| Security Profiles Operator | Versions not published | |
| Zero Trust Workload Identity Manager | Versions not published | |
| Zero Trust Workload Identity Manager - Tech Preview | Versions not published | |
| Machine Deletion Remediation Operator | Versions not published | |
| OpenShift Service Mesh 2 | Versions not published | |
| OpenShift Service Mesh 3 | Versions not published | |
| Power monitoring for Red Hat OpenShift | Versions not published | |
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Red Hat Hardened Images | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenShift for Windows Containers | Versions not published | |
| Red Hat Quay 3 | Versions not published | |
| Red Hat Service Interconnect 1 | Versions not published | |
| Red Hat Service Interconnect 2 | Versions not published | |
| streams for Apache Kafka 3 | Versions not published | |
| Red Hat Quay 3.10 1779822261 | earliest → < 1779822261 | 1779822261 |
| Red Hat OpenShift Container Platform 4.14 1787002807 | earliest → < 1787002807 | 1787002807 |
| Red Hat Satellite 6.19 for RHEL 9 | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Versions not published | |
| Red Hat AI Inference Server | Versions not published | |
| Red Hat OpenShift Container Platform 4.15 1787028097 | earliest → < 1787028097 | 1787028097 |
| Red Hat OpenShift Builds 1.7.4 1780374228 | earliest → < 1780374228 | 1780374228 |
| Red Hat OpenShift Container Platform 4.17 | Versions not published | |
| RHEM 1.0 for RHEL 9 | Versions not published | |
| Red Hat Edge Manager 1.0 1783502438 | earliest → < 1783502438 | 1783502438 |
| Red Hat OpenShift Service Mesh 3 1778164208 | earliest → < 1778164208 | 1778164208 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260803064027 | earliest → < 8060020260803064027.ad008a3a | 8060020260803064027.ad008a3a |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260515174849 | earliest → < 8060020260515174849.ad008a3a | 8060020260515174849.ad008a3a |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020260515174849 | earliest → < 8060020260515174849.ad008a3a | 8060020260515174849.ad008a3a |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020260515174849 | earliest → < 8060020260515174849.ad008a3a | 8060020260515174849.ad008a3a |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published | |
| Red Hat OpenStack Platform 17.1 for RHEL 9 | Versions not published | |
| Red Hat OpenStack Services on OpenShift 18.0 1782140297 | earliest → < 1782140297 | 1782140297 |
| Red Hat Edge Manager 1.1 1784127736 | earliest → < 1784127736 | 1784127736 |
| RHEM 1.1 for RHEL 10 | Versions not published | |
| RHEM 1.1 for RHEL 9 | Versions not published | |
| Compliance Operator 1 1781605005 | earliest → < 1781605005 | 1781605005 |
| multicluster engine for Kubernetes 2.1 1780106633 | earliest → < 1780106633 | 1780106633 |
| Red Hat Advanced Cluster Security 4.9 1782891812 | earliest → < 1782891812 | 1782891812 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 1.0 | earliest → < 1.0.3-1779996197 | 1.0.3-1779996197 |
| Red Hat multicluster global hub 1.4.3 1779838819 | earliest → < 1779838819 | 1779838819 |
| Red Hat OpenShift Builds 1.7.1 1780374228 | earliest → < 1780374228 | 1780374228 |
| Service Telemetry Framework 1.5 1777452570 | earliest → < 1777452570 | 1777452570 |
| Logging for Red Hat OpenShift 6.0 1781192891 | earliest → < 1781192891 | 1781192891 |
| multicluster engine for Kubernetes 2.11.0 1779991600 | earliest → < 1779991600 | 1779991600 |
| Red Hat Migration Toolkit 1.8 1783914276 | earliest → < 1783914276 | 1783914276 |
| Red Hat multicluster global hub 1.5.2 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat OpenShift distributed tracing 3.9.1 1776435680 | earliest → < 1776435680 | 1776435680 |
| Multicluster Global Hub 1.5.6 1779828691 | earliest → < 1779828691 | 1779828691 |
| Multicluster Global Hub 1.6.4 1780320809 | earliest → < 1780320809 | 1780320809 |
| Logging for Red Hat OpenShift 6.4 1780051640 | earliest → < 1780051640 | 1780051640 |
| Logging Subsystem for Red Hat OpenShift 6 1781192891 | earliest → < 1781192891 | 1781192891 |
| Network Observability (NETOBSERV) 1.11.1 1778508501 | earliest → < 1778508501 | 1778508501 |
| Red Hat multicluster global hub 1.5.0 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Logging Subsystem for Red Hat OpenShift 6.2 1784747813 | earliest → < 1784747813 | 1784747813 |
| Logging for Red Hat OpenShift 6.2 1784747813 | earliest → < 1784747813 | 1784747813 |
| Red Hat multicluster global hub 1.4.4 1779838819 | earliest → < 1779838819 | 1779838819 |
| Red Hat multicluster global hub 1.6.0 1780320809 | earliest → < 1780320809 | 1780320809 |
| Red Hat OpenShift distributed tracing 3.9.2 1776435680 | earliest → < 1776435680 | 1776435680 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | Versions not published | |
| OpenShift API for Data Protection 1.3 1785180878 | earliest → < 1785180878 | 1785180878 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 8060020260803064027 | earliest → < 8060020260803064027.ad008a3a | 8060020260803064027.ad008a3a |
| Multicluster Global Hub 1.5.7 1779828691 | earliest → < 1779828691 | 1779828691 |
| Multicluster Global Hub 1.6.5 1780320809 | earliest → < 1780320809 | 1780320809 |
| Network Observability (NETOBSERV) 1.11.0 1778508501 | earliest → < 1778508501 | 1778508501 |
| Red Hat multicluster global hub 1.4.2 1779838819 | earliest → < 1779838819 | 1779838819 |
| Red Hat multicluster global hub 1.5.1 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat Migration Toolkit for Containers 1.8 1783914276 | earliest → < 1783914276 | 1783914276 |
| Red Hat OpenShift Container Platform 4.16 1786788331 | earliest → < 1786788331 | 1786788331 |
| Red Hat OpenShift AI 3.4 1787089049 | earliest → < 1787089049 | 1787089049 |
| Red Hat OpenShift Container Platform 4.21 1786526139 | earliest → < 1786526139 | 1786526139 |
| Red Hat Container Native Virtualization 4.16 1787227059 | earliest → < 1787227059 | 1787227059 |
| Red Hat OpenShift Container Platform 4.12 1786752296 | earliest → < 1786752296 | 1786752296 |
| Red Hat multicluster global hub 1.5.3 1779828691 | earliest → < 1779828691 | 1779828691 |
| Logging for Red Hat OpenShift 6 1781192891 | earliest → < 1781192891 | 1781192891 |
| Red Hat OpenShift Container Platform 4.13 | Versions not published |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified
Other CVEs of crypto/x509
The 15 CVEs of crypto/x509 →
CVE-2026-111943
On most platforms, Go uses the given system root certificates
6.8
Medium
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Medium
CVE-2026-32281
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a…
7.5
High
CVE-2026-33810
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…
7.5
High