Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade crunUpgrade netavarkUpgrade buildahUpgrade container-selinuxUpgrade buildah-testsUpgrade podman-testsUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade conmonUpgrade libslirpUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade libslirp-develUpgrade podman-pluginsUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade criu-libsUpgrade udicaUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade criuUpgrade podmanUpgrade podman-catatonitUpgrade skopeoUpgrade critUpgrade containers-commonUpgrade fuse-overlayfsUpgrade runcUpgrade toolboxUpgrade criu-devel | Feb 13, 2024 | Dec 5, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Dec 5, 2023 |
| Oracle_linux | — | Upgrade skopeoUpgrade python3-criuUpgrade podman-remoteUpgrade criu-libsUpgrade podmanUpgrade runcUpgrade critUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade podman-pluginsUpgrade containers-commonUpgrade container-selinuxUpgrade udicaUpgrade netavarkUpgrade podman-dockerUpgrade slirp4netnsUpgrade podman-testsUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade crunUpgrade python3-podmanUpgrade buildahUpgrade conmonUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade criu | Feb 15, 2024 | Dec 5, 2023 |
| Redhat Openshift | — | Upgrade buildahUpgrade microshiftUpgrade skopeoUpgrade podmanUpgrade butaneUpgrade openshift-clientsUpgrade openshiftUpgrade runcUpgrade containernetworking-plugins | Feb 29, 2024 | Dec 5, 2023 |
| Redhat_linux | — | Upgrade netavarkUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade skopeo-testsUpgrade criu-develUpgrade critUpgrade toolboxUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade runcUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoNo solution existsUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade criuUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade conmonUpgrade crun-debuginfoUpgrade crunUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade python3-criuUpgrade udicaUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade toolbox-testsUpgrade podman-testsUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podman-debugsourceUpgrade cockpit-podmanUpgrade container-selinuxUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade oci-seccomp-bpf-hook-debuginfo | Feb 12, 2024 | Dec 5, 2023 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade crun-debugsourceUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade netavarkUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade criu-libsUpgrade toolboxUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade skopeo-debuginfoUpgrade conmonUpgrade skopeoUpgrade slirp4netnsUpgrade buildah-testsUpgrade libslirpUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade crunUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade criu-develUpgrade toolbox-testsUpgrade runcUpgrade python3-criuUpgrade criuUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade runc-debugsource | May 8, 2025 | Dec 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Dec 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub