CVE-2026-4428 in AWS-LC
要約
〜によって MITRE • 2026年03月20日
A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks.
To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.