REDHAT-BUG-2418462: High severity go crypto/x509 vulnerability
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify HostnameError.Error() to (a) limit the number of hostnames included in the formatted error string (for example, truncate or summarize when the list exceeds a reasonable bound) to prevent unbounded output, and (b) construct the error string without repeated string concatenation (use a linear builder/streaming approach such as a string builder/buffer or join operation) to avoid quadratic runtime and excessive resource consumption.
HostnameError.Error() hosts_print_limit and error string construction = cap number of hosts included; use linear/streaming string construction instead of repeated concatenation
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2418462?
The severity of REDHAT-BUG-2418462 is considered high due to its potential for denial of service through excessive resource consumption.
How do I fix REDHAT-BUG-2418462?
To fix REDHAT-BUG-2418462, you should update to the latest available patch provided by Red Hat.
What impact does REDHAT-BUG-2418462 have on my systems?
The impact of REDHAT-BUG-2418462 includes the possibility of performance degradation and crashes due to resource exhaustion.
Is REDHAT-BUG-2418462 exploitable by a remote attacker?
Yes, REDHAT-BUG-2418462 can be exploited by a remote attacker through a specially crafted certificate.
What versions are affected by REDHAT-BUG-2418462?
REDHAT-BUG-2418462 affects various versions of Red Hat software, and users should consult the relevant advisories for specific details.