PT-2026-45873
CVE-2026-27145
·
تاريخ النشر
2026-06-02
·
تاريخ التحديث
2026-10-15
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
اسم البرنامج المعرض للخطر والإصدارات المتأثرة
إصدارات Go السابقة للإصدار 1.25-1.25.11-1.1
إصدارات Go السابقة للإصدار 1.26-1.26.4-1.1
الوصف
يحدث تحليل غير فعال لأسماء المضيف المرشحة في حزمة
crypto/x509. كانت الدالة (*x509.Certificate).VerifyHostname تستدعي سابقًا الدالة matchHostnames() في حلقة تتكرر على جميع إدخالات «الاسم البديل للموضوع» (SAN) في نظام أسماء النطاقات (DNS)، مما يتسبب في تنفيذ strings.Split(host, ”.“) بشكل متكرر على نفس اسم المضيف المدخل. وعند وجود قائمة كبيرة من إدخالات SAN في نظام أسماء النطاقات (DNS)، تتزايد تكاليف التحقق تزايدًا تربيعيًا بناءً على عدد إدخالات SAN مضروبًا في عدد تسميات اسم المضيف. تحدث هذه الأعباء الإضافية حتى بالنسبة للشهادات غير الموثوق بها لأن x509.Verify تتحقق من صحة أسماء المضيفين قبل إنشاء سلسلة الشهادات.التوصيات
التحديث إلى الإصدار 1.25-1.25.11-1.1.
التحديث إلى الإصدار 1.26-1.26.4-1.1.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALSA-2026:29980
ALSA-2026:29981
ALSA-2026:34357
ALSA-2026:34359
ALSA-2026:35832
ALSA-2026:36317
ALSA-2026:38995
ALSA-2026:39573
ALSA-2026:46394
ALSA-2026:46395
AZL-89381
AZL-89384
AZL-98601
BIT-GOLANG-2026-27145
CLEANSTART-2026-AG91746
CLEANSTART-2026-AK43046
CLEANSTART-2026-AL61798
CLEANSTART-2026-AN05911
CLEANSTART-2026-AP10784
CLEANSTART-2026-AP31842
CLEANSTART-2026-AP81049
CLEANSTART-2026-AQ50460
CLEANSTART-2026-AQ94704
CLEANSTART-2026-AR14847
CLEANSTART-2026-AS38473
CLEANSTART-2026-AV21509
CLEANSTART-2026-BG93699
CLEANSTART-2026-BJ92729
CLEANSTART-2026-BM12601
CLEANSTART-2026-BM78291
CLEANSTART-2026-BO52019
CLEANSTART-2026-BP02821
CLEANSTART-2026-BP69037
CLEANSTART-2026-BX78383
CLEANSTART-2026-CA89903
CLEANSTART-2026-CF09706
CLEANSTART-2026-CH64198
CLEANSTART-2026-CL67452
CLEANSTART-2026-CM11507
CLEANSTART-2026-CN27602
CLEANSTART-2026-CN27900
CLEANSTART-2026-CP20786
CLEANSTART-2026-DB46993
CLEANSTART-2026-DS82965
CLEANSTART-2026-DT81884
CLEANSTART-2026-DX81395
CLEANSTART-2026-EA12165
CLEANSTART-2026-EC45528
CLEANSTART-2026-EG39405
CLEANSTART-2026-EG40747
CLEANSTART-2026-EH36582
CLEANSTART-2026-ER76776
CLEANSTART-2026-EU52554
CLEANSTART-2026-EX51963
CLEANSTART-2026-EY79095
CLEANSTART-2026-FA38569
CLEANSTART-2026-FD47409
CLEANSTART-2026-FF85222
CLEANSTART-2026-FH24210
CLEANSTART-2026-FJ76096
CLEANSTART-2026-GB26717
CLEANSTART-2026-GB38700
CLEANSTART-2026-GE09388
CLEANSTART-2026-GG40538
CLEANSTART-2026-GM77447
CLEANSTART-2026-GM82388
CLEANSTART-2026-GQ12922
CLEANSTART-2026-GW77529
CLEANSTART-2026-GX44743
CLEANSTART-2026-HF59239
CLEANSTART-2026-HJ99696
CLEANSTART-2026-HK37223
CLEANSTART-2026-HN49173
CLEANSTART-2026-HO16255
CLEANSTART-2026-HR50080
CLEANSTART-2026-HS88612
CLEANSTART-2026-IC09970
CLEANSTART-2026-IC13101
CLEANSTART-2026-IK56508
CLEANSTART-2026-IN26303
CLEANSTART-2026-IT06487
CLEANSTART-2026-JA94642
CLEANSTART-2026-JI93588
CLEANSTART-2026-JL47330
CLEANSTART-2026-JN91167
CLEANSTART-2026-JN92182
CLEANSTART-2026-JT15863
CLEANSTART-2026-JT42679
CLEANSTART-2026-JW89909
CLEANSTART-2026-JY51137
CLEANSTART-2026-KB08955
CLEANSTART-2026-KJ72865
CLEANSTART-2026-KJ73757
CLEANSTART-2026-KK55331
CLEANSTART-2026-KL41807
CLEANSTART-2026-KL87201
CLEANSTART-2026-KP00708
CLEANSTART-2026-KQ31223
CLEANSTART-2026-KT90792
CLEANSTART-2026-KU01035
CLEANSTART-2026-KY85414
CLEANSTART-2026-KZ96078
CLEANSTART-2026-LA96365
CLEANSTART-2026-LG62775
CLEANSTART-2026-LK25174
CLEANSTART-2026-LK99645
CLEANSTART-2026-LN45890
CLEANSTART-2026-LO51673
CLEANSTART-2026-LO55919
CLEANSTART-2026-MA24172
CLEANSTART-2026-MA83809
CLEANSTART-2026-MC76610
CLEANSTART-2026-MI06133
CLEANSTART-2026-MJ39387
CLEANSTART-2026-MK94759
CLEANSTART-2026-MM20617
CLEANSTART-2026-MW09143
CLEANSTART-2026-MW42038
CLEANSTART-2026-MY46883
CLEANSTART-2026-MY68881
CLEANSTART-2026-MZ00063
CLEANSTART-2026-NE76010
CLEANSTART-2026-NE90506
CLEANSTART-2026-OE40076
CLEANSTART-2026-OF83437
CLEANSTART-2026-OG70620
CLEANSTART-2026-OH26633
CLEANSTART-2026-OM32721
CLEANSTART-2026-ON19155
CLEANSTART-2026-OO10146
CLEANSTART-2026-OV19069
CLEANSTART-2026-OY74734
CLEANSTART-2026-PC73667
CLEANSTART-2026-PD40538
CLEANSTART-2026-PE88816
CLEANSTART-2026-PH30270
CLEANSTART-2026-PH84276
CLEANSTART-2026-PM97219
CLEANSTART-2026-QB45720
CLEANSTART-2026-QK25151
CLEANSTART-2026-QN79037
CLEANSTART-2026-QN97697
CLEANSTART-2026-QT53274
CLEANSTART-2026-QU83011
CLEANSTART-2026-QV22657
CLEANSTART-2026-RC17482
CLEANSTART-2026-RE39938
CLEANSTART-2026-RG22668
CLEANSTART-2026-RJ71322
CLEANSTART-2026-RO22308
CLEANSTART-2026-RT07393
CLEANSTART-2026-RU97646
CLEANSTART-2026-RV88159
CLEANSTART-2026-RW78583
CLEANSTART-2026-SA78596
CLEANSTART-2026-SF49994
CLEANSTART-2026-SG29434
CLEANSTART-2026-SH05010
CLEANSTART-2026-SM80424
CLEANSTART-2026-SO86245
CLEANSTART-2026-SP73148
CLEANSTART-2026-SQ76279
CLEANSTART-2026-SV92564
CLEANSTART-2026-SW10568
CLEANSTART-2026-SX09346
CLEANSTART-2026-SY48547
CLEANSTART-2026-TG81541
CLEANSTART-2026-TL44561
CLEANSTART-2026-TO13966
CLEANSTART-2026-TO35695
CLEANSTART-2026-TP13569
CLEANSTART-2026-TY53144
CLEANSTART-2026-UC73978
CLEANSTART-2026-UI27816
CLEANSTART-2026-UO11850
CLEANSTART-2026-UV44486
CLEANSTART-2026-UV44995
CLEANSTART-2026-UY68298
CLEANSTART-2026-VD47610
CLEANSTART-2026-VE68915
CLEANSTART-2026-VH00240
CLEANSTART-2026-VO98287
CLEANSTART-2026-VP53607
CLEANSTART-2026-VQ22894
CLEANSTART-2026-VR76068
CLEANSTART-2026-VV82680
CLEANSTART-2026-VY69341
CLEANSTART-2026-WF25734
CLEANSTART-2026-WK82561
CLEANSTART-2026-WO73902
CLEANSTART-2026-WP03591
CLEANSTART-2026-WT22902
CLEANSTART-2026-WW79343
CLEANSTART-2026-WY21381
CLEANSTART-2026-WZ31386
CLEANSTART-2026-XC13942
CLEANSTART-2026-XI63678
CLEANSTART-2026-XK25146
CLEANSTART-2026-XQ43390
CLEANSTART-2026-XR72034
CLEANSTART-2026-XS03563
CLEANSTART-2026-XV43582
CLEANSTART-2026-XV47154
CLEANSTART-2026-XZ28830
CLEANSTART-2026-YB92538
CLEANSTART-2026-YF30779
CLEANSTART-2026-YO86996
CLEANSTART-2026-YS01797
CLEANSTART-2026-YS01805
CLEANSTART-2026-YT82900
CLEANSTART-2026-YY48565
CLEANSTART-2026-ZH27719
CLEANSTART-2026-ZL51442
CLEANSTART-2026-ZN46983
CLEANSTART-2026-ZW09225
CLSA-2026-1783955624
CLSA-2026-1784188646
CLSA-2026-1784190453
CLSA-2026-1784302739
ECHO-8EFC-C381-6569
GO-2026-5037
OPENSUSE-SU-2026:10959-1
OPENSUSE-SU-2026:10960-1
OPENSUSE-SU-2026:10975-1
OPENSUSE-SU-2026:20976-1
OPENSUSE-SU-2026:20977-1
OPENSUSE-SU-2026:21254-1
OPENSUSE-SU-2026:21319-1
OPENSUSE-SU-2026:21436-1
OPENSUSE-SU-2026:21483-1
RHSA-2026:23262
RHSA-2026:23264
RHSA-2026:29980
RHSA-2026:29981
RHSA-2026:34357
RHSA-2026:34359
RHSA-2026:35832
RHSA-2026:36317
RHSA-2026:38995
RHSA-2026:39005
RHSA-2026:39573
RHSA-2026:39879
RHSA-2026:41930
RHSA-2026:42079
RHSA-2026:42080
RHSA-2026:42082
RHSA-2026:42150
RHSA-2026:42151
RHSA-2026:42240
RHSA-2026:42946
RHSA-2026:46394
RHSA-2026:46395
RHSA-2026:49702
RHSA-2026:49703
RHSA-2026:49712
RHSA-2026:50319
RHSA-2026:51187
RHSA-2026:53374
RHSA-2026:53412
RHSA-2026:53413
RHSA-2026:53415
RHSA-2026:53416
RHSA-2026:54168
RHSA-2026:54401
RHSA-2026:54757
RHSA-2026:57649
RHSA-2026:60315
RHSA-2026:60354
RHSA-2026:61253
RHSA-2026:68335
RHSA-2026:70645
SUSE-SU-2026:22154-1
SUSE-SU-2026:22155-1
SUSE-SU-2026:22572-1
SUSE-SU-2026:22638-1
SUSE-SU-2026:2326-1
SUSE-SU-2026:2327-1
SUSE-SU-2026:3046-1
SUSE-SU-2026:3047-1
SUSE-SU-2026:3102-1
SUSE-SU-2026:3151-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المراجع · 3137
- https://github.com/golang/go/commit/ce5a3e718cac440defae617dc6ed72a6e94cd0af⭐ 134666🔗 19005·ملاحظة
- https://github.com/golang/go/issues/79694⭐ 134666🔗 19005·ملاحظة
- https://github.com/golang/go/commit/c5d18e479475e251c8593b1113fb53836117d5d3⭐ 134666🔗 19005·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WY21381.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HS88612.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MW42038.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OV19069.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DS82965.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BG93699.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JT42679.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YO86996.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EH36582.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TO13966.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VE68915.json⭐ 2·ملاحظة
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LK25174.json⭐ 2·ملاحظة