PT-2026-23663 · Mstdlib+1 · Stdlib+1

Jakub Ciolek · Publicado 2026-03-06 · Atualizado 2026-05-18 · CVE-2026-27138

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas AWS Lambda (versões afetadas não especificadas)

Descrição Existe uma falha na qual a verificação de certificado pode levar à queda do programa. Isso ocorre quando um certificado dentro de uma cadeia não possui um nome DNS, enquanto outro certificado na mesma cadeia possui restrições de nome excluídas. Este problema afeta programas que verificam diretamente cadeias de certificados X.509 ou aqueles que utilizam TLS. O problema afeta 27 imagens base do Lambda que utilizam stdlib.

Recomendações No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

AZL-79610

AZL-79625

BDU:2026-04126

BIT-GOLANG-2026-27138

CLEANSTART-2026-AB43319

CLEANSTART-2026-AT12816

CLEANSTART-2026-BC17682

CLEANSTART-2026-BH97849

CLEANSTART-2026-FM44162

CLEANSTART-2026-GI67088

CLEANSTART-2026-GM63718

CLEANSTART-2026-GQ03231

CLEANSTART-2026-HA09227

CLEANSTART-2026-HJ72983

CLEANSTART-2026-JM96857

CLEANSTART-2026-KR58137

CLEANSTART-2026-LA67881

CLEANSTART-2026-MX70474

CLEANSTART-2026-ON62368

CLEANSTART-2026-PS51260

CLEANSTART-2026-QO29688

CLEANSTART-2026-RR25843

CLEANSTART-2026-SP88135

CLEANSTART-2026-SR26977

CLEANSTART-2026-TC31671

CLEANSTART-2026-TM31143

CLEANSTART-2026-UG20989

CLEANSTART-2026-UI21589

CLEANSTART-2026-UY60586

CVE-2026-27138

GO-2026-4600

OPENSUSE-SU-2026:10299-1

OPENSUSE-SU-2026:10509-1

OPENSUSE-SU-2026:20342-1

OPENSUSE-SU-2026:20537-1

RHSA-2026:7291

SUSE-SU-2026:0876-1

SUSE-SU-2026:0976-1

SUSE-SU-2026:0993-1

SUSE-SU-2026:1042-1

SUSE-SU-2026:21195-1

Produtos afetados

Aws-Lambda

Stdlib

Referências · 378

• https://github.com/golang/go/issues/77953 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UG20989.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GM63718.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SR26977.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HA09227.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UI21589.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS51260.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MX70474.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QO29688.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BH97849.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TM31143.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RR25843.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SP88135.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GI67088.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KR58137.json · Nota