Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-27137

Опубликовано: 06 мар. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

questing

ignored

end of life, was needs-triage
resolute

needs-triage

stonking

DNE

upstream

not-affected

debian: Vulnerable code not present

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

questing

ignored

end of life, was needs-triage
resolute

needs-triage

stonking

DNE

upstream

not-affected

debian: Vulnerable code not present

Показывать по

РелизСтатусПримечание
devel

not-affected

1.26.8-2
esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

questing

DNE

resolute

needs-triage

stonking

needs-triage

upstream

released

1.26.1-1

Показывать по

EPSS

Процентиль: 52%
0.00661
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
8 месяцев назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 7.5
nvd
8 месяцев назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

CVSS3: 5.9
msrc
8 месяцев назад

Incorrect enforcement of email constraints in crypto/x509

CVSS3: 7.5
debian
8 месяцев назад

When verifying a certificate chain which contains a certificate contai ...

CVSS3: 7.5
github
8 месяцев назад

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

EPSS

Процентиль: 52%
0.00661
Низкий

7.5 High

CVSS3