Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade toolboxUpgrade buildah-testsUpgrade udicaUpgrade skopeoUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podman-testsUpgrade buildahUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade criuUpgrade runcUpgrade aardvark-dnsUpgrade netavarkUpgrade podmanUpgrade critUpgrade podman-remoteUpgrade containers-commonUpgrade criu-libsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade crunUpgrade container-selinuxUpgrade python3-podmanUpgrade python3-criuUpgrade podman-gvproxyUpgrade criu-develUpgrade libslirp-develUpgrade podman-pluginsUpgrade conmon | May 15, 2023 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-rpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade runc-debuginfoUpgrade golang-raceUpgrade go-rpm-templatesUpgrade golang-github-gorilla-mux-develUpgrade golistUpgrade go-srpm-macrosUpgrade golist-debuginfoUpgrade golang-sharedUpgrade golang-miscUpgrade golang-srcUpgrade golang-docsUpgrade go-filesystemUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-kr-pty-develUpgrade golang-googlecode-net-develUpgrade runcUpgrade golang-googlecode-sqlite-develUpgrade golang-github-gorilla-context-develUpgrade golang-testsUpgrade golang-binUpgrade golang | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade golang-testsUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-sharedUpgrade golistUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golang-docsUpgrade golangUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsource | Feb 17, 2025 | Jun 2, 2022 |
| Centos_linux | — | Upgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade crun-debugsourceUpgrade libslirpUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade crunUpgrade golang-srcUpgrade delveUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade libslirp-develUpgrade python3-criuUpgrade podman-testsUpgrade criu-libsUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade containers-commonUpgrade container-selinuxUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade runcUpgrade buildah-debugsourceUpgrade udicaUpgrade delve-debugsourceUpgrade toolbox-testsUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade buildahUpgrade netavarkUpgrade golang-raceUpgrade criu-debugsourceUpgrade critUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade golang-testsUpgrade python3-podmanUpgrade podman-catatonitUpgrade golang-miscUpgrade golangUpgrade conmonUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade skopeoUpgrade toolboxUpgrade golang-docsUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests | Nov 9, 2022 | Aug 10, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jun 7, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-docsUpgrade criu-develUpgrade delveUpgrade containers-commonUpgrade runcUpgrade crunUpgrade podmanUpgrade podman-catatonitUpgrade golang-binUpgrade golang-srcUpgrade netavarkUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade skopeoUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade criu-libsUpgrade golang-testsUpgrade skopeo-testsUpgrade golang-miscUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade criuUpgrade go-toolsetUpgrade podman-testsUpgrade conmonUpgrade container-selinuxUpgrade libslirpUpgrade buildah-testsUpgrade golang-raceUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade udicaUpgrade golangUpgrade buildahUpgrade python3-podmanUpgrade python3-criuUpgrade podman-dockerUpgrade fuse-overlayfs | Jul 13, 2022 | Jun 2, 2022 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeoUpgrade ignitionUpgrade cri-toolsUpgrade windows-machine-config-rhel8-operatorUpgrade cri-oUpgrade butane | Aug 26, 2022 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade libslirp-develUpgrade containers-commonUpgrade go-toolsetUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade golang-srcUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade golangUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade delve-debuginfoUpgrade golang-miscUpgrade toolbox-testsUpgrade golang-docsUpgrade python3-criuUpgrade conmonUpgrade podman-testsUpgrade buildah-testsUpgrade toolbox-debugsourceNo solution existsUpgrade udicaUpgrade critUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-dockerUpgrade podmanUpgrade skopeo-testsUpgrade toolboxUpgrade container-selinuxUpgrade podman-catatonitUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade skopeoUpgrade crunUpgrade criu-develUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade podman-remoteUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade golang-binUpgrade delve-debugsourceUpgrade delveUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade runcUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade libslirpUpgrade golang-testsUpgrade buildah-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsource | Nov 9, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade golang-binUpgrade go-toolsetUpgrade delve-debuginfoUpgrade libslirp-develUpgrade criuUpgrade criu-libsUpgrade golangUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade critUpgrade golang-raceUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade python3-criuUpgrade libslirpUpgrade criu-develUpgrade libslirp-debugsourceUpgrade delve | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.17-docUpgrade go1.18Upgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.17-raceUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.18Upgrade golang-1.13Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-goUpgrade golang-1.16Upgrade golang-1.16-srcUpgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub