Svi
Pretraži prema proizvođaču
Pretraži prema CWE oznaci
O usluzi
Pretplate
Jezik
hr
en
CVE-2026-33811 - CERT CVE
CVE-2026-33811
ID
CVE-2026-33811
Sažetak
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Reference
https://go.dev/cl/767860
https://go.dev/issue/78803
https://groups.google.com/g/golang-announce/c/qcCIEXso47M
https://pkg.go.dev/vuln/GO-2026-4981
https://access.redhat.com/errata/RHSA-2026:23262
https://access.redhat.com/errata/RHSA-2026:23264
https://access.redhat.com/errata/RHSA-2026:33120
https://access.redhat.com/errata/RHSA-2026:33123
https://access.redhat.com/errata/RHSA-2026:33142
https://access.redhat.com/errata/RHSA-2026:33150
https://access.redhat.com/errata/RHSA-2026:33574
https://access.redhat.com/errata/RHSA-2026:34357
https://access.redhat.com/errata/RHSA-2026:34359
https://access.redhat.com/errata/RHSA-2026:34364
https://access.redhat.com/errata/RHSA-2026:35832
https://access.redhat.com/security/cve/CVE-2026-33811
https://bugzilla.redhat.com/show_bug.cgi?id=2467822
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json
CVSS
Base:
7.5
Impact:
3.6
Exploitability:
3.9
Pristup
Vektor
Složenost
Autentikacija
NETWORK
LOW
NONE
Impact
Povjerljivost
Cjelovitost
Dostupnost
NONE
NONE
HIGH
CVSS vektor
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Zadnje važnije ažuriranje
06-07-2026 - 13:16
Objavljeno
07-05-2026 - 20:16