Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

šŸ—“ļøĀ 13 May 2026Ā 08:08:18Reported byĀ RedHatTypeĀ 
redhat
Ā redhatšŸ”—Ā access.redhat.comšŸ‘Ā 15Ā Views

Go crypto/x509 and tls have a denial of service flaw where chain building with many intermediate certificates causes unbounded work.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026
29 Jun 202610:18
ā€“ibm
ATTACKERKB		CVE-2026-32280
8 Apr 202601:06
ā€“attackerkb
Tenable Nessus		Amazon Linux 2023 : yq (ALAS2023-2026-1582)
13 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1593)
30 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-1598)
30 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : golist (ALAS2023-2026-1599)
30 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : nerdctl (ALAS2023-2026-1605)
30 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1606)
30 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : docker (ALAS2023-2026-1615)
30 Apr 202600:00
ā€“nessus
Tenable Nessus		Amazon Linux 2023 : ecs-init (ALAS2023-2026-1637)
20 May 202600:00
ā€“nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux8.10aarch64git-lfs0:3.4.1-10.el8_10git-lfs-0:3.4.1-10.el8_10.aarch64.rpm
Red Hat Enterprise Linux8.10ppc64legit-lfs0:3.4.1-10.el8_10git-lfs-0:3.4.1-10.el8_10.ppc64le.rpm
Red Hat Enterprise Linux8.10s390xgit-lfs0:3.4.1-10.el8_10git-lfs-0:3.4.1-10.el8_10.s390x.rpm
Red Hat Enterprise Linux8.10x86_64git-lfs0:3.4.1-10.el8_10git-lfs-0:3.4.1-10.el8_10.x86_64.rpm
Red Hat Enterprise Linux8.10aarch64git-lfs-debuginfo0:3.4.1-10.el8_10git-lfs-debuginfo-0:3.4.1-10.el8_10.aarch64.rpm
Red Hat Enterprise Linux8.10ppc64legit-lfs-debuginfo0:3.4.1-10.el8_10git-lfs-debuginfo-0:3.4.1-10.el8_10.ppc64le.rpm
Red Hat Enterprise Linux8.10s390xgit-lfs-debuginfo0:3.4.1-10.el8_10git-lfs-debuginfo-0:3.4.1-10.el8_10.s390x.rpm
Red Hat Enterprise Linux8.10x86_64git-lfs-debuginfo0:3.4.1-10.el8_10git-lfs-debuginfo-0:3.4.1-10.el8_10.x86_64.rpm
Red Hat Enterprise Linux8.10aarch64git-lfs-debugsource0:3.4.1-10.el8_10git-lfs-debugsource-0:3.4.1-10.el8_10.aarch64.rpm
Red Hat Enterprise Linux8.10ppc64legit-lfs-debugsource0:3.4.1-10.el8_10git-lfs-debugsource-0:3.4.1-10.el8_10.ppc64le.rpm
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Jul 2026 23:20Current
7.2High risk
Vulners AI Score7.2
CVSS 3.17.5
EPSS0.00615
SSVC
CWE-770
certificate chainintermediate certificatesdenial of servicego standard library
15