Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade runcUpgrade critUpgrade golang-binUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade fuse-overlayfsUpgrade container-selinuxUpgrade containers-commonUpgrade cockpit-podmanUpgrade podman-remoteUpgrade aardvark-dnsUpgrade buildahUpgrade criu-libsUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade toolbox-testsUpgrade libslirp-develUpgrade golang-miscUpgrade golang-srcUpgrade buildah-testsUpgrade go-toolsetUpgrade python3-criuUpgrade podman-dockerUpgrade libslirpUpgrade crunUpgrade conmonUpgrade criu-develUpgrade criuUpgrade podman-catatonitUpgrade toolboxUpgrade netavarkUpgrade slirp4netnsUpgrade podman-testsUpgrade delveUpgrade python3-podmanUpgrade golang-testsUpgrade podman-pluginsUpgrade skopeoUpgrade podmanUpgrade udicaUpgrade podman-gvproxyUpgrade golang-raceUpgrade skopeo-tests | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade golang-raceUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golang-shared | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade golang-docsUpgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade golang-miscUpgrade golang-testsUpgrade golang-bin | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade udicaUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade criuUpgrade delveUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade toolbox-debugsourceUpgrade criu-debugsourceUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade podman-debuginfoUpgrade skopeoUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade crun-debugsourceUpgrade slirp4netns-debugsourceUpgrade toolbox-testsUpgrade crunUpgrade libslirp-debugsourceUpgrade golang-testsUpgrade runcUpgrade python3-criuUpgrade buildahUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade golang-docsUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade golangUpgrade podman-dockerUpgrade conmonUpgrade libslirp-develUpgrade golang-srcUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade slirp4netnsUpgrade libslirpUpgrade golang-raceUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade python3-podmanUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade go-toolset | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade golang-srcUpgrade libslirp-develUpgrade conmonUpgrade criu-libsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade container-selinuxUpgrade delveUpgrade skopeo-testsUpgrade podman-pluginsUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade crunUpgrade skopeoUpgrade buildahUpgrade golang-raceUpgrade golangUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade podman-testsUpgrade golang-docsUpgrade golang-binUpgrade udicaUpgrade podman-remoteUpgrade slirp4netnsUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade netavarkUpgrade libslirpUpgrade golang-testsUpgrade podman-gvproxyUpgrade runcUpgrade buildah-testsUpgrade critUpgrade cockpit-podmanUpgrade criuUpgrade podmanUpgrade golang-misc | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade conmonUpgrade podmanUpgrade runcUpgrade microshiftUpgrade skopeoUpgrade openshiftUpgrade cri-toolsUpgrade cri-o | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade criu-libsUpgrade skopeo-testsUpgrade golang-binUpgrade delveUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade runcUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade golang-docsUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade criu-develUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade podman-remoteUpgrade containers-commonUpgrade critUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade golang-raceUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade delve-debuginfoUpgrade libslirpUpgrade criu-debuginfoUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-dockerUpgrade podman-catatonitUpgrade criuUpgrade golangUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade golang-srcNo solution existsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade python3-criuUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade golang-miscUpgrade skopeo-debugsourceUpgrade libslirp-debuginfoUpgrade udicaUpgrade podman-testsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildah-tests | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade containernetworking-pluginsUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade golang-raceUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade golang-binUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade netavarkUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade criu-develUpgrade containers-commonUpgrade crun-debugsourceUpgrade runcUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade critUpgrade conmonUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade golangUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade fuse-overlayfsUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade podman-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade slirp4netns | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.18-raceUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.19-raceUpgrade go1.18-openssl-raceUpgrade container-suseconnectUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.18-opensslUpgrade go1.20-raceUpgrade go1.18-docUpgrade go1.20Upgrade go1.19 | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.19-goUpgrade golang-1.19-srcUpgrade golang-1.18-srcUpgrade golang-1.20-goUpgrade golang-1.17-goUpgrade golang-1.17-srcUpgrade golang-1.17Upgrade golang-1.18-goUpgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro) | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub