If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade skopeoUpgrade udicaUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-catatonitUpgrade golang-binUpgrade python3-criuUpgrade golang-testsUpgrade runcUpgrade aardvark-dnsUpgrade golang-docsUpgrade podman-pluginsUpgrade osbuild-composer-workerUpgrade grafana-selinuxUpgrade grafana-pcpUpgrade critUpgrade crunUpgrade opentelemetry-collectorUpgrade criuUpgrade buildahUpgrade podmanUpgrade osbuild-composerUpgrade toolbox-testsUpgrade golang-raceUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade golang-miscUpgrade criu-libsUpgrade slirp4netnsUpgrade containers-commonUpgrade libslirp-develUpgrade python3-podmanUpgrade delveUpgrade toolboxUpgrade osbuild-composer-coreUpgrade container-selinuxUpgrade libslirpUpgrade go-toolsetUpgrade golang-srcUpgrade grafanaUpgrade criu-develUpgrade podman-gvproxyUpgrade conmonUpgrade podman-testsUpgrade golang | May 7, 2026 | May 6, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooks-debuginfoUpgrade amazon-cloudwatch-agentUpgrade runc-debuginfoUpgrade oci-add-hooksUpgrade golistUpgrade golang-srcUpgrade golist-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golangUpgrade golang-miscUpgrade docker-debuginfoUpgrade golang-sharedUpgrade containerdUpgrade containerd-debuginfoUpgrade nerdctlUpgrade golang-docsUpgrade dockerUpgrade runcUpgrade runfinch-finchUpgrade containerd-stressUpgrade amazon-ecr-credential-helper-debuginfoUpgrade nerdctl-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade soci-snapshotterUpgrade ecs-init | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade grafana-pcp | May 4, 2026 | Apr 8, 2026 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Aug 27, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade grafanaUpgrade buildah-tests-debuginfoUpgrade host-metering-selinuxUpgrade go-fdo-server-manufacturerUpgrade podman-plugins-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade yggdrasilUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade buildah-testsUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade flightctl-cliUpgrade crunUpgrade osbuild-composer-debuginfoUpgrade python3-podmanUpgrade git-lfsUpgrade gvisor-tap-vsock-gvforwarderUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade osbuild-composer-coreUpgrade criu-libsUpgrade rhc-develUpgrade podman-dockerUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade go-fdo-client-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade runc-debugsourceUpgrade image-builder-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade rhc-debuginfoUpgrade go-fdo-server-debugsourceUpgrade container-selinuxUpgrade libslirpUpgrade rhc-worker-playbookUpgrade ipp-usbUpgrade conmonUpgrade criu-develUpgrade golang-raceUpgrade oci-seccomp-bpf-hookUpgrade yggdrasil-debuginfoUpgrade rhc-worker-playbook-debuginfoUpgrade skopeo-debuginfoUpgrade rhc-debugsourceUpgrade python3-criuUpgrade delveUpgrade flightctl-agentUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade go-toolsetUpgrade golang-miscUpgrade opentelemetry-collectorUpgrade host-metering-debugsourceUpgrade buildahUpgrade osbuild-composer-core-debuginfoUpgrade go-fdo-serverUpgrade grafana-debugsourceUpgrade runc-debuginfoUpgrade golang-srcUpgrade host-metering-debuginfoUpgrade criu-debugsourceUpgrade flightctl-selinuxUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debuginfoUpgrade runcUpgrade podman-catatonitUpgrade grafana-selinuxUpgrade rhc-worker-scriptUpgrade flightctl-observabilityUpgrade toolbox-testsUpgrade golangUpgrade grafana-debuginfoUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade rhcUpgrade go-fdo-server-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade host-meteringUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade delve-debugsourceUpgrade golang-docsUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade grafana-pcpUpgrade buildah-debugsourceUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade golang-testsUpgrade go-fdo-clientUpgrade git-lfs-debuginfoUpgrade toolbox-debugsourceUpgrade netavarkUpgrade containernetworking-pluginsUpgrade gvisor-tap-vsock-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade yggdrasil-examples-debuginfoUpgrade skopeoUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade image-builder-debuginfoUpgrade flightctl-servicesUpgrade osbuild-composer-workerUpgrade yggdrasil-debugsourceUpgrade yggdrasil-develUpgrade podman-tests-debuginfoUpgrade go-fdo-client-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade gvisor-tap-vsock-debugsourceUpgrade critUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade osbuild-composerUpgrade grafana-pcp-debugsourceUpgrade go-fdo-server-ownerUpgrade udicaNo solution existsUpgrade podman-debuginfoUpgrade image-builderUpgrade golang-binUpgrade criuUpgrade containers-commonUpgrade criu-debuginfoUpgrade osbuild-composer-debugsourceUpgrade fuse-overlayfsUpgrade ipp-usb-debuginfoUpgrade podman-remote-debuginfoUpgrade go-fdo-server-rendezvousUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade gvisor-tap-vsockUpgrade buildah-debuginfo | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade ipp-usbUpgrade ipp-usb-debuginfoUpgrade grafanaUpgrade runcUpgrade criu-develUpgrade toolbox-debuginfoUpgrade golang-binUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade osbuild-composer-debugsourceUpgrade libslirp-develUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade yggdrasilUpgrade podman-testsUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade go-fdo-server-debugsourceUpgrade grafana-debugsourceUpgrade yggdrasil-debugsourceUpgrade osbuild-composerUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade podman-remote-debuginfoUpgrade go-fdo-serverUpgrade podman-plugins-debuginfoUpgrade opentelemetry-collectorUpgrade git-lfsUpgrade osbuild-composer-workerUpgrade podman-gvproxyUpgrade containers-commonUpgrade python3-criuUpgrade skopeo-testsUpgrade criu-libsUpgrade critUpgrade crun-debugsourceUpgrade delveUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade runc-debugsourceUpgrade toolboxUpgrade git-lfs-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade podman-catatonitUpgrade image-builder-debugsourceUpgrade image-builder-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade yggdrasil-debuginfoUpgrade grafana-pcp-debugsourceUpgrade podman-tests-debuginfoUpgrade skopeo-debugsourceUpgrade image-builderUpgrade grafana-pcp-debuginfoUpgrade go-fdo-clientUpgrade delve-debuginfoUpgrade buildah-debuginfoUpgrade libslirpUpgrade go-fdo-client-debugsourceUpgrade osbuild-composer-coreUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade buildahUpgrade aardvark-dnsUpgrade podmanUpgrade netavarkUpgrade go-fdo-client-debuginfoUpgrade criu-debuginfoUpgrade yggdrasil-develUpgrade grafana-pcpUpgrade podman-catatonit-debuginfoUpgrade grafana-selinuxUpgrade fuse-overlayfsUpgrade go-fdo-server-debuginfoUpgrade skopeoUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade conmonUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade golang-race | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 9.4.13Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.4.1 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub