6.1
Moyenne
CVE-2024-45341 A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that…
Description
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| crypto/x509 1.24 | premières → < 1.24.0-rc.2 | 1.24.0-rc.2 |
| crypto/x509 1.23 | 1.23.0-0 → < 1.23.5 | 1.23.5 |
| crypto/x509 1.22 | premières → < 1.22.11 | 1.22.11 |
Références
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Chronologie
- Publiée
- Dernière modification
Autres CVE de crypto/x509
Les 15 CVE de crypto/x509 →
CVE-2026-111943
On most platforms, Go uses the given system root certificates
6.8
Moyenne
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Moyenne
CVE-2026-32280
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…
7.5
Élevée
CVE-2026-32281
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a…
7.5
Élevée