CVE-2026-33810 | BDVDB-2026-325685 Detail
Go standard librarycrypto/x509
Description#
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
References#
- https://go.dev/cl/763763
- https://go.dev/issue/78332
- https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
- https://pkg.go.dev/vuln/GO-2026-4866
- http://www.openwall.com/lists/oss-security/2026/04/19/4
- http://www.openwall.com/lists/oss-security/2026/04/20/1
- https://access.redhat.com/security/cve/CVE-2026-33810
- https://bugzilla.redhat.com/show_bug.cgi?id=2456335
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json
- https://access.redhat.com/errata/RHSA-2026:68334
- https://access.redhat.com/errata/RHSA-2026:54757
- https://access.redhat.com/errata/RHSA-2026:14391
- https://access.redhat.com/errata/RHSA-2026:36796
- https://access.redhat.com/errata/RHSA-2026:28047
- https://access.redhat.com/errata/RHSA-2026:39810
Show all 40
- https://access.redhat.com/errata/RHSA-2026:34365
- https://access.redhat.com/errata/RHSA-2026:49703
- https://access.redhat.com/errata/RHSA-2026:67149
- https://access.redhat.com/errata/RHSA-2026:49702
- https://access.redhat.com/errata/RHSA-2026:67517
- https://access.redhat.com/errata/RHSA-2026:56143
- https://access.redhat.com/errata/RHSA-2026:59546
- https://access.redhat.com/errata/RHSA-2026:19719
- https://access.redhat.com/errata/RHSA-2026:66327
- https://access.redhat.com/errata/RHSA-2026:61313
- https://access.redhat.com/errata/RHSA-2026:19714
- https://access.redhat.com/errata/RHSA-2026:67134
- https://access.redhat.com/errata/RHSA-2026:63332
- https://access.redhat.com/errata/RHSA-2026:62577
- https://access.redhat.com/errata/RHSA-2026:62578
- https://access.redhat.com/errata/RHSA-2026:65534
- https://access.redhat.com/errata/RHSA-2026:19144
- https://access.redhat.com/errata/RHSA-2026:19135
- https://access.redhat.com/errata/RHSA-2026:65895
- https://access.redhat.com/errata/RHSA-2026:57126
- https://access.redhat.com/errata/RHSA-2026:51288
- https://access.redhat.com/errata/RHSA-2026:68504
- https://access.redhat.com/errata/RHSA-2026:61253
- https://access.redhat.com/errata/RHSA-2026:67160
- https://access.redhat.com/errata/RHSA-2026:65359
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.