The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-remoteUpgrade grafanaUpgrade podman-pluginsUpgrade podmanUpgrade podman-tests | May 4, 2022 | Jul 15, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-docs | Aug 6, 2021 | Jul 15, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jul 15, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 15, 2021 |
| Centos_linux | — | Upgrade golang-srcUpgrade golangUpgrade podmanUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade delveUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-gvproxyUpgrade grafana-debuginfoUpgrade podman-testsUpgrade golang-docsUpgrade podman-dockerUpgrade grafanaUpgrade go-toolsetUpgrade golang-race | Aug 12, 2021 | Jul 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Jul 15, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jul 12, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 28, 2021 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 12, 2021 | Jul 15, 2021 |
| Oracle_linux | — | Upgrade buildahUpgrade golang-srcUpgrade go-toolsetUpgrade buildah-testsUpgrade golangUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade criuUpgrade golang-miscUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade netavarkUpgrade podman-remoteUpgrade podman-dockerUpgrade python3-criuUpgrade golang-testsUpgrade podman-pluginsUpgrade critUpgrade runcUpgrade libslirpUpgrade grafanaUpgrade containernetworking-pluginsUpgrade conmonUpgrade libslirp-develUpgrade golang-raceUpgrade golang-docsUpgrade crunUpgrade python3-podmanUpgrade podmanUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade criu-develUpgrade containers-commonUpgrade criu-libsUpgrade skopeo-testsUpgrade delveUpgrade udicaUpgrade podman-testsUpgrade container-selinux | Aug 12, 2021 | Jul 13, 2021 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade windows-machine-config-rhel8-operatorUpgrade redhat-release-coreosUpgrade cri-oUpgrade openshiftUpgrade containernetworking-pluginsUpgrade openshift-clientsUpgrade atomic-openshift-service-idlerUpgrade butaneUpgrade golang-github-prometheus-promuUpgrade ignition | Aug 12, 2021 | Jul 13, 2021 |
| Redhat_linux | — | Upgrade libslirpUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade skopeo-testsUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade netavarkUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade golang-raceUpgrade delveUpgrade conmonUpgrade criu-develUpgrade skopeoUpgrade golang-miscUpgrade slirp4netnsUpgrade criuUpgrade toolboxUpgrade podman-catatonitUpgrade golang-testsUpgrade udicaUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade golang-docsUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade python3-criuUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade golang-srcUpgrade criu-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade crun-debugsourceUpgrade conmon-debuginfoNo solution existsUpgrade podman-plugins-debuginfoUpgrade critUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade grafanaUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade containers-commonUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade runcUpgrade golangUpgrade cockpit-podmanUpgrade toolbox-debugsourceUpgrade buildah | Aug 12, 2021 | Jul 15, 2021 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade slirp4netnsUpgrade delveUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade crunUpgrade toolbox-testsUpgrade golang-binUpgrade delve-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade grafanaUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade runc-debuginfoUpgrade golangUpgrade aardvark-dnsUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade netavark | Mar 12, 2024 | Jul 15, 2021 |
| Suse | — | Upgrade go1.16-raceUpgrade go1.16Upgrade go1.15Upgrade go1.15-docUpgrade go1.15-raceUpgrade go1.16-doc | Jul 20, 2021 | Jul 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub