Bug 2449205 (CVE-2026-4428) - CVE-2026-4428 AWS-LC: AWS-LC: Security bypass allows revoked certificates to be accepted due to CRL validation error
Summary: CVE-2026-4428 AWS-LC: AWS-LC: Security bypass allows revoked certificates to ...
Keywords:
Status: NEW
Alias: CVE-2026-4428
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-03-19 21:02 UTC by OSIDB Bzimport
Modified: 2026-08-15 08:27 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-03-19 21:02:28 UTC 
A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows  a revoked certificate to bypass certificate revocation checks.

To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0.
Note You need to log in before you can comment on or make changes to this bug.