BDU:2026-07254
Уязвимость компонента crypto-x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
📄 Описание
Уязвимость компонента crypto-x509 языка программирования Go связана с неограниченным распределением ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании
🖥️ Уязвимое ПО
Red Hat Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», The Go Project
Наименование ПО: Red Hat Enterprise Linux, OpenShift Container Platform, Red Hat Quay, Red Hat 3scale API Management Platform, Openshift Service Mesh, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), Red Hat Openshift Data Foundation, Red Hat OpenShift GitOps, Red Hat Satellite, Red Hat OpenStack Platform, Red Hat Web Terminal, OpenShift Developer Tools and Services, Red Hat OpenShift on AWS, Node HealthCheck Operator, Red Hat OpenShift Virtualization, OpenShift Serverless, OpenShift Dev Spaces, Migration Toolkit for Containers, OpenShift Pipelines, OpenShift API for Data Protection, Red Hat Service Interconnect, Logging subsystem for Red Hat OpenShift, multicluster engine for Kubernetes, Mirror registry for Red Hat OpenShift, Red Hat OpenShift Lightspeed, Red Hat OpenShift Cluster Manager CLI, Red Hat Trusted Artifact Signer, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat build of Apache Camel, Builds for Red Hat OpenShift, cert-manager Operator for Red Hat OpenShift, Confidential Compute Attestation, Custom Metric Autoscaler operator for Red Hat Openshift, Multicluster Global Hub, Cryostat, Assisted Installer for Red Hat OpenShift Container Platform, Streams for Apache Kafka, Red Hat Certification Program for Red Hat Enterprise Linux, Red Hat Connectivity Link, Red Hat Enterprise Linux AI, Red Hat Advanced Cluster Management for Kubernetes, External Secrets Operator for Red Hat OpenShift, Fence Agents Remediation Operator, Ansible Automation Platform, Red Hat OpenShift AI, Red Hat Hardened Images, Go, Compliance Operator, Deployment Validation Operator, ExternalDNS Operator, File Integrity Operator, Machine Deletion Remediation Operator, Migration Toolkit for Applications, Red Hat Edge Manager, Red Hat OpenShift Dev Workspaces Operator, Security Profiles Operator, Zero Trust Workload Identity Manager, Gatekeeper, Red Hat OpenShift distributed tracing, Logical Volume Manager Storage, Power monitoring for Red Hat OpenShift, Red Hat Lightspeed for Runtimes Operator, Red Hat OpenShift for Windows Containers, Network Observability, Red Hat Developer Hub
Версия ПО: 7 (Red Hat Enterprise Linux), 8 (Red Hat Enterprise Linux), 4 (OpenShift Container Platform), 3 (Red Hat Quay), 2 (Red Hat 3scale API Management Platform), 2 (Openshift Service Mesh), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 7.3 (РЕД ОС), 4 (Red Hat Openshift Data Foundation), - (Red Hat OpenShift GitOps), 6 (Red Hat Satellite), 9 (Red Hat Enterprise Linux), 16.2 (Red Hat OpenStack Platform), - (Red Hat Web Terminal), - (OpenShift Developer Tools and Services), - (Red Hat OpenShift on AWS), - (Node HealthCheck Operator), 4 (Red Hat OpenShift Virtualization), - (OpenShift Serverless), - (OpenShift Dev Spaces), 17.1 (Red Hat OpenStack Platform), - (Migration Toolkit for Containers), - (OpenShift Pipelines), - (OpenShift API for Data Protection), 1 (Red Hat Service Interconnect), - (Logging subsystem for Red Hat OpenShift), - (multicluster engine for Kubernetes), - (Mirror registry for Red Hat OpenShift), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 18.0 (Red Hat OpenStack Platform), 9.4 Extended Update Support (Red Hat Enterprise Linux), - (Red Hat OpenShift Lightspeed), - (Red Hat OpenShift Cluster Manager CLI), - (Red Hat Trusted Artifact Signer), - (Red Hat Advanced Cluster Management for Kubernetes 2), 10 (Red Hat Enterprise Linux), HawtIO 4 (Red Hat build of Apache Camel), 3 (Openshift Service Mesh), - (Builds for Red Hat OpenShift), - (cert-manager Operator for Red Hat OpenShift), - (Confidential Compute Attestation), - (Custom Metric Autoscaler operator for Red Hat Openshift), - (Multicluster Global Hub), 13 (Debian GNU/Linux), 4 on RHEL 9 (Cryostat), 2 (Assisted Installer for Red Hat OpenShift Container Platform), 3 (Streams for Apache Kafka), 9.6 Extended Update Support (Red Hat Enterprise Linux), 8.0 (РЕД ОС), 10.0 Extended Update Support (Red Hat Enterprise Linux), 3.16 (Red Hat Quay), 2 (Mirror registry for Red Hat OpenShift), 9 (Red Hat Certification Program for Red Hat Enterprise Linux), 1 (Red Hat Connectivity Link), 3 (Red Hat Enterprise Linux AI), 4.9 (Red Hat Advanced Cluster Management for Kubernetes), - (External Secrets Operator for Red Hat OpenShift), - (Fence Agents Remediation Operator), 2 (Ansible Automation Platform), - (Red Hat OpenShift AI), - (Red Hat Hardened Images), до 1.25.9 (Go), от 1.26.0 до 1.26.2 (Go), 2.6 (Openshift Service Mesh), 3.1 (Openshift Service Mesh), 3.2 (Openshift Service Mesh), 3.3 (Openshift Service Mesh), - (Compliance Operator), - (Deployment Validation Operator), - (ExternalDNS Operator), - (File Integrity Operator), - (Machine Deletion Remediation Operator), 8 (Migration Toolkit for Applications), 1 (Red Hat Edge Manager), - (Red Hat OpenShift Dev Workspaces Operator), 2 (Red Hat Service Interconnect), - (Security Profiles Operator), - (Zero Trust Workload Identity Manager), Tech Preview (Zero Trust Workload Identity Manager), 3 (Gatekeeper), 3.9.3 (Red Hat OpenShift distributed tracing), - (Logical Volume Manager Storage), - (Power monitoring for Red Hat OpenShift), - (Red Hat Lightspeed for Runtimes Operator), - (Red Hat OpenShift for Windows Containers), 1.11.2 (Network Observability), 2.6 (Ansible Automation Platform), 1.9 (Red Hat Developer Hub), 1.5 (Red Hat OpenStack Platform)
Тип ПО: Операционная система, Прикладное ПО информационных систем, ПО программно-аппаратного средства, ПО виртуализации/ПО виртуального программно-аппаратного средства, Сетевое средство, Сетевое программное средство
ОС / платформа: Red Hat Inc. Red Hat Enterprise Linux 7 , Red Hat Inc. Red Hat Enterprise Linux 8 , Сообщество свободного программного обеспечения Debian GNU/Linux 11 , Сообщество свободного программного обеспечения Debian GNU/Linux 12 , ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), Red Hat Inc. Red Hat Enterprise Linux 9 , Red Hat Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions , Red Hat Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service , Red Hat Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support , Red Hat Inc. Red Hat Enterprise Linux 9.4 Extended Update Support , Red Hat Inc. Red Hat Enterprise Linux 10 , Сообщество свободного программного обеспечения Debian GNU/Linux 13 , Red Hat Inc. Red Hat Enterprise Linux 9.6 Extended Update Support , ООО «Ред Софт» РЕД ОС 8.0 (запись в едином реестре российских программ №3751), Red Hat Inc. Red Hat Enterprise Linux 10.0 Extended Update Support , Red Hat Inc. Red Hat Enterprise Linux AI 3
⚙️ Технические сведения
📊 CVSS
CVSS 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS 3.0
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
⚠️ Уровень опасности
Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)
Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,5)
Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,5)
🔗 Источники и меры
🔗 https://pkg.go.dev/vuln/GO-2026-4947
🔗 https://go.dev/cl/758320
🔗 https://go.dev/issue/78282
🔗 https://groups.google.com/g/golang-announce/c/0uYb...
🔗 https://redos.red-soft.ru/search/?iblock_id=&q=CVE...
🔗 https://security-tracker.debian.org/tracker/CVE-20...
🔗 https://access.redhat.com/security/cve/cve-2026-32...
🏷️ Идентификаторы
📅 Даты