7.5Alta

CVE-2026-33811Crash when handling long CNAME response in net

Go standard library net; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform … Publicada: 2026-05-07 22:41 (hace 6 meses)

Descripción

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Debilidad (CWE): CWE-415 CWE-1341

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
acm	2.16	—
advanced cluster security	4.10	—
advanced cluster security	4.11	—
advanced cluster security	4.9	—
amq streams	3.2	—
ansible automation platform	2.5	—
ansible automation platform	2.6	—
cryostat	4	—
edge manager	1.0	—
edge manager	1.1	—
Go standard library	net	< 1.25.10, 1.26.0-0 – < 1.26.3
golang	go	< 1.25.10
lightspeed for runtimes	1.0	—
logging	6.0	—
logging	6.2	—
logging	6.4	—
logging	6.5	—
migration toolkit applications	8.1	—
migration toolkit applications	8.2	—
multicluster engine	2.10	—
multicluster engine	2.11	—
multicluster engine	2.6	—
multicluster engine	2.8	—
multicluster engine	2.9	—
multicluster globalhub	1.4	—
multicluster globalhub	1.5	—
multicluster globalhub	1.6	—
multicluster globalhub	1.7	—
openshift	4.14	—
openshift	4.15	—
openshift	4.16	—
openshift	4.17	—
openshift	4.18	—
openshift	4.19	—
openshift	4.20	—
openshift	4.21	—
openshift ai	2.25	—
openshift ai	3.4	—
openshift api data protection	1.3	—
openshift api data protection	1.4	—
openshift api data protection	1.5	—
openshift api data protection	1.6	—
openshift builds	1.7	—
openshift compliance operator	1	—
openshift distributed tracing	3.10	—
openshift gitops	1.19	—
openshift gitops	1.20	—
openshift gitops	1.21	—
openstack	16.2	—
openstack	18.0	—
Red Hat	Cryostat 4 on RHEL 9	all versions
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	all versions
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	all versions
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	all versions
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	all versions
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	all versions
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	all versions
Red Hat	Red Hat OpenShift Container Platform 4.14	all versions
Red Hat	Red Hat OpenShift Container Platform 4.15	all versions
Red Hat	Red Hat OpenShift Container Platform 4.16	all versions
Red Hat	Red Hat OpenShift Container Platform 4.17	all versions
Red Hat	Red Hat OpenShift Container Platform 4.18	all versions
Red Hat	Red Hat OpenShift Container Platform 4.19	all versions
Red Hat	Red Hat OpenStack Platform 16.2	all versions
Red Hat	Red Hat OpenStack Services on OpenShift 18.0	all versions
Red Hat	Red Hat Satellite 6.16 for RHEL 8	all versions
Red Hat	Red Hat Satellite 6.16 for RHEL 9	all versions
rhdh	1.9	—
rhmt	1.8	—
satellite	6.16	—
satellite	6.17	—
satellite	6.18	—
satellite	6.19	—
service mesh	3.0	—
service mesh	3.1	—
service mesh	3.2	—
service mesh	3.3	—
source to image	1.6	—
trusted artifact signer	1.4	—
webterminal	1.11	—
webterminal	1.12	—
webterminal	1.13	—
webterminal	1.14	—
webterminal	1.15	—
webterminal	1.16	—
workload availability far	0.8	—
workload availability mdr	0.7	—
workload availability nhc	0.12	—
workload availability nmo	5.7	—
workload availability sbr	0.3	—
workload availability snr	0.13	—

Referencias y parches

Coincidencias CPE (NVD) (2)

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* < 1.25.10
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* ≥ 1.26.0 < 1.26.3

Puntuación CVSS

7.5Alta

Fuente: CISA-ADP · CVSS 3.1

Vector de ataque: Red
Complejidad: Baja
Privilegios: Ninguno
Interacción del usuario: Ninguna
Alcance: Sin cambio
Confidencialidad: Ninguno
Integridad: Ninguno
Disponibilidad: Alto

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Todas las puntuaciones (5)

CISA-ADP	CVSS 3.1	7.5Alta
redhat-SADP	CVSS 3.1	7.5Alta
nvd	CVSS 3.1	7.5Alta
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5Alta
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	CVSS 3.1	7.5Alta

EPSS (probabilidad de explotación en 30 días)

0.88%

superior al 59 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: none
Automatizable: yes
Impacto técnico: partial

Cronología

ID reservado2026-03-23
Publicada2026-05-07 22:41
Llegó a IP-DB2026-10-24 23:41
Última actualización2026-10-26 03:10

Asignada por (CNA): Go
Estado en NVD: Modified

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Go

Sin puntuación

CVE-2026-97033 ayer

Unexpected code execution via --sysroot, -target, -isysroot, -Wl,-syslibroot, and -x cgo flags in cmd/go

Go toolchain cmd/go

Building a malicious package that uses cgo could cause arbitrary code execution at build time through several compiler and linker flags permitted in "#cgo" directives. Specifically, "--sysroot" in GCC and Clang relocates compiler subprograms, spec files, and …

Sin puntuación

CVE-2026-97034 ayer

Arbitrary command execution via GCC spec files in cgo linker search directories in cmd/go

Go toolchain cmd/go

When using GCC, building a malicious package that uses cgo could cause arbitrary command execution at link time via untrusted GCC spec files ("specs" or "*.spec"). When linking with "-fopenmp", "-fopenacc", or "-fsanitize=" in "#cgo LDFLAGS", GCC's built-in l…

Sin puntuación

CVE-2026-97054 ayer

HTTP/1 server crash due to MaxBytesReader header race in net/http

Go standard library net/http

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes …

Sin puntuación

CVE-2026-97035 ayer

Unexpected code execution and arbitrary file write via Clang -gen-* and GCC -gnat* flags in cgo in cmd/go

Go toolchain cmd/go

When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-*" or "-gnat*" flags in "#cgo" directives. The "-g*" wildcard in the compiler and linker …

Sin puntuación

CVE-2026-97036 ayer

Arbitrary code execution during build on darwin via "-l to_library" in cgo in cmd/go

Go toolchain cmd/go

On Darwin, building a malicious package that uses cgo could cause arbitrary code execution when using the Apple linker due to passing "-l to_library <path>" in a "#cgo LDFLAGS" directive. The Apple linker recombines the separated arguments "-l" and "to_librar…

Sin puntuación

CVE-2026-97037 ayer

Linker script injection via split -Wl, flags and Darwin or symbol linker flags in cgo in cmd/go

Go toolchain cmd/go

Building a malicious package that uses cgo could cause arbitrary code execution at link time by passing linker script files to the host linker via "#cgo LDFLAGS". Split "-Wl," flags that consume a following argument (such as "-Wl,-rpath", "-Wl,--just-symbols"…