PT-2026-23662 · Amazon Web Services+1 · Aws-Lambda+1

Jakub Ciolek · Publicado 2026-03-06 · Atualizado 2026-05-30 · CVE-2026-27137

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Nome do Software Vulnerável e Versões Afetadas AWS Lambda (versões afetadas não especificadas)

Descrição Existe uma falha nas imagens base do AWS Lambda que utilizam stdlib. Especificamente, ao validar uma cadeia de certificados com múltiplas restrições de endereço de e-mail que compartilham partes locais comuns, mas diferem nas partes de domínio, as restrições não são aplicadas corretamente. Apenas a última restrição na cadeia é considerada durante a verificação.

Recomendações No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

ALSA-2026:19022

ALSA-2026:19181

ALSA-2026:8842

AZL-79613

AZL-79628

BDU:2026-04124

BIT-GOLANG-2026-27137

CLEANSTART-2026-AB43319

CLEANSTART-2026-AT12816

CLEANSTART-2026-BC17682

CLEANSTART-2026-BH97849

CLEANSTART-2026-FM44162

CLEANSTART-2026-GI67088

CLEANSTART-2026-GM63718

CLEANSTART-2026-GQ03231

CLEANSTART-2026-HA09227

CLEANSTART-2026-HJ72983

CLEANSTART-2026-JM96857

CLEANSTART-2026-KR58137

CLEANSTART-2026-LA67881

CLEANSTART-2026-MX70474

CLEANSTART-2026-ON62368

CLEANSTART-2026-PS51260

CLEANSTART-2026-QO29688

CLEANSTART-2026-RR25843

CLEANSTART-2026-SP88135

CLEANSTART-2026-SR26977

CLEANSTART-2026-TC31671

CLEANSTART-2026-TM31143

CLEANSTART-2026-UG20989

CLEANSTART-2026-UI21589

CLEANSTART-2026-UY60586

CVE-2026-27137

GO-2026-4599

OPENSUSE-SU-2026:10299-1

OPENSUSE-SU-2026:10909-1

OPENSUSE-SU-2026:20342-1

OPENSUSE-SU-2026:20537-1

RHSA-2026:10169

RHSA-2026:10929

RHSA-2026:19022

RHSA-2026:19049

RHSA-2026:19132

RHSA-2026:19181

RHSA-2026:22450

RHSA-2026:22714

RHSA-2026:7291

RHSA-2026:8842

SUSE-SU-2026:0876-1

SUSE-SU-2026:0976-1

SUSE-SU-2026:0993-1

SUSE-SU-2026:1042-1

SUSE-SU-2026:21195-1

Produtos afetados

Aws-Lambda

Rocky Linux

Referências · 393

• https://github.com/golang/go/issues/77952 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AB43319.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SP88135.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TM31143.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GM63718.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BH97849.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LA67881.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ON62368.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BC17682.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FM44162.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RR25843.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HA09227.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS51260.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SR26977.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JM96857.json · Nota