Описание
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-infra/focal | DNE  | |
| focal | DNE  | |
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-infra-legacy/trusty | needs-triage  | |
| esm-infra/bionic | needs-triage  | |
| esm-infra/focal | DNE  | |
| esm-infra/xenial | needs-triage  | |
| focal | DNE  | |
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/bionic | needs-triage  | |
| esm-apps/jammy | needs-triage  | |
| esm-apps/xenial | needs-triage  | |
| esm-infra/focal | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | needs-triage  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-infra/focal | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/bionic | needs-triage  | |
| esm-apps/focal | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-infra/focal | DNE  | |
| focal | DNE  | |
| jammy | needs-triage  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/bionic | needs-triage  | |
| esm-apps/focal | needs-triage  | |
| esm-apps/xenial | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | needs-triage  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/focal | needs-triage  | |
| esm-apps/jammy | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | needs-triage  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/focal | needs-triage  | |
| esm-apps/jammy | needs-triage  | |
| esm-apps/noble | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | needs-triage  | |
| noble | needs-triage  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/focal | needs-triage  | |
| esm-apps/jammy | released  | 1.22.2-2~22.04.3 | 
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | released  | 1.22.2-2~22.04.3 | 
| noble | released  | 1.22.2-2ubuntu0.4 | 
| oracular | released  | 1.22.8-1ubuntu0.1 | 
| plucky | DNE  | |
| questing | DNE  | |
| upstream | released  | 1.22.11-1 | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | not-affected  | 1.23.5-1 | 
| esm-apps/jammy | needs-triage  | |
| esm-apps/noble | needs-triage  | |
| esm-infra/focal | DNE  | |
| focal | DNE  | |
| jammy | needs-triage  | |
| noble | needs-triage  | |
| oracular | ignored  | end of life, was needs-triage | 
| plucky | not-affected  | 1.23.5-1 | 
| questing | not-affected  | 1.23.5-1 | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | needs-triage  | |
| esm-infra/focal | DNE  | |
| focal | DNE  | |
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | needs-triage  | |
| questing | needs-triage  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-infra/focal | DNE  | |
| esm-infra/xenial | needs-triage  | |
| focal | DNE  | |
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/bionic | needs-triage  | |
| esm-infra/focal | DNE  | |
| focal | DNE  | |
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| devel | DNE  | |
| esm-apps/bionic | needs-triage  | |
| esm-infra/focal | DNE  | |
| focal | DNE  | |
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | |
| plucky | DNE  | |
| questing | DNE  | |
| upstream | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| bionic | ignored  | end of standard support | 
| devel | needs-triage  | |
| esm-apps/bionic | needs-triage  | |
| esm-apps/focal | needs-triage  | |
| esm-apps/jammy | needs-triage  | |
| esm-apps/noble | needs-triage  | |
| esm-infra-legacy/trusty | DNE  | |
| esm-infra/xenial | needs-triage  | |
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | needs-triage  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| bionic | ignored  | end of standard support | 
| devel | DNE  | |
| esm-apps/focal | not-affected  | code-not-present | 
| esm-infra-legacy/trusty | DNE  | |
| esm-infra/bionic | needs-triage  | |
| esm-infra/xenial | needs-triage  | |
| focal | not-affected  | code-not-present | 
| jammy | DNE  | |
| noble | DNE  | |
| oracular | DNE  | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| bionic | ignored  | end of standard support | 
| devel | not-affected  | code not present | 
| esm-infra-legacy/trusty | DNE  | |
| esm-infra/bionic | not-affected  | code not present | 
| esm-infra/focal | not-affected  | code not present | 
| esm-infra/xenial | not-affected  | code not present | 
| focal | ignored  | end of standard support, was needs-triage | 
| jammy | not-affected  | code not present | 
| noble | not-affected  | code not present | 
| oracular | ignored  | end of life, was needs-triage | 
Показывать по
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
A certificate with a URI which has a IPv6 address with a zone ID may i ...
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
EPSS
6.1 Medium
CVSS3