crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

🗓️ 01 Oct 2026 18:07:30Reported by RedHatType

redhat🔗 access.redhat.com👁 2 Views

Remote DoS in golang crypto/x509 via excessive processing of DNS SAN entries.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin:Vulnerability in crypto affects IBM Netezza Appliance	12 Aug 202609:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	23 Jun 202603:15	–	ibm
attackerkb	CVE-2026-27145	2 Jun 202622:01	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : golist (ALAS2023-2026-1874)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : compat-golang-github-cpuguy83-md2man-2-devel, golang-github-cpuguy83-md2man, golang-github-cpuguy83-md2man-devel (ALAS2023-2026-1875)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-1876)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : golang-github-burntsushi-toml, golang-github-burntsushi-toml-devel (ALAS2023-2026-1877)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1878)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : soci-snapshotter (ALAS2023-2026-1884)	22 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-1885)	22 Jun 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9	aarch64	cri-o	1.25.5-8.rhaos4.12.git6120b13.el9	cri-o-1.25.5-8.rhaos4.12.git6120b13.el9.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	cri-o	1.25.5-8.rhaos4.12.git6120b13.el9	cri-o-1.25.5-8.rhaos4.12.git6120b13.el9.ppc64le.rpm
Red Hat Enterprise Linux	9	s390x	cri-o	1.25.5-8.rhaos4.12.git6120b13.el9	cri-o-1.25.5-8.rhaos4.12.git6120b13.el9.s390x.rpm
Red Hat Enterprise Linux	9	x86_64	cri-o	1.25.5-8.rhaos4.12.git6120b13.el9	cri-o-1.25.5-8.rhaos4.12.git6120b13.el9.x86_64.rpm
Red Hat Enterprise Linux	8	aarch64	cri-o	1.25.5-37.rhaos4.12.git2e7f657.el8	cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	cri-o	1.25.5-37.rhaos4.12.git2e7f657.el8	cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	cri-o	1.25.5-37.rhaos4.12.git2e7f657.el8	cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	cri-o	1.25.5-37.rhaos4.12.git2e7f657.el8	cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8.x86_64.rpm
Red Hat Enterprise Linux	9	aarch64	cri-o-debuginfo	1.25.5-8.rhaos4.12.git6120b13.el9	cri-o-debuginfo-1.25.5-8.rhaos4.12.git6120b13.el9.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	cri-o-debuginfo	1.25.5-8.rhaos4.12.git6120b13.el9	cri-o-debuginfo-1.25.5-8.rhaos4.12.git6120b13.el9.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-27145
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/783621
go	www.go.dev/issue/79694
groups	www.groups.google.com/g/golang-announce/c/tKs3rmcBcKw
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-27145
pkg	www.pkg.go.dev/vuln/GO-2026-5037
cve	www.cve.org/CVERecord

02 Oct 2026 12:08Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00591

SSVC

golang crypto/x509 VerifyHostname Denial of Service DNS SAN entries unix