CVE-2026-4428 in AWS-LC
요약
\~에 의해 MITRE • 2026. 03. 20.
A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks.
To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.