(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
References
Configurations
No configuration.
History
22 Jul 2026, 19:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
22 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-606 | |
| References |
|
04 Jun 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
02 Jun 2026, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-02 23:16
Updated : 2026-07-22 19:10
NVD link : CVE-2026-27145
Mitre link : CVE-2026-27145
CVE.ORG link : CVE-2026-27145
JSON object : View
Products Affected
No product.
CWE
CWE-606
Unchecked Input for Loop Condition
