Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-miscUpgrade delveUpgrade golang-binUpgrade containers-commonUpgrade python3-criuUpgrade podmanUpgrade golang-srcUpgrade grafana-pcpUpgrade criu-libsUpgrade osbuild-composer-coreUpgrade toolboxUpgrade netavarkUpgrade podman-pluginsUpgrade container-selinuxUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade skopeoUpgrade osbuild-composerUpgrade libslirp-develUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade runcUpgrade skopeo-testsUpgrade grafana-selinuxUpgrade golangUpgrade conmonUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade crunUpgrade git-lfsUpgrade podman-testsUpgrade opentelemetry-collectorUpgrade toolbox-testsUpgrade golang-raceUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade udicaUpgrade slirp4netnsUpgrade critUpgrade python3-podmanUpgrade libslirpUpgrade grafanaUpgrade osbuild-composer-workerUpgrade buildah-testsUpgrade go-toolsetUpgrade criuUpgrade buildahUpgrade golang-docs | Oct 11, 2026 | Aug 26, 2026 |
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-misc | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docs | Sep 1, 2026 | Aug 13, 2026 |
| Oracle_linux | — | Upgrade containernetworking-pluginsUpgrade yggdrasilUpgrade buildahUpgrade criuUpgrade python3-criuUpgrade skopeoUpgrade runcUpgrade golang-binUpgrade podmanUpgrade golang-testsUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade podman-catatonitUpgrade grafana-selinuxUpgrade containers-commonUpgrade osbuild-composerUpgrade udicaUpgrade osbuild-composer-workerUpgrade container-selinuxUpgrade podman-remoteUpgrade grafana-pcpUpgrade yggdrasil-develUpgrade critUpgrade golang-docsUpgrade aardvark-dnsUpgrade libslirpUpgrade skopeo-testsUpgrade libslirp-develUpgrade golang-miscUpgrade podman-gvproxyUpgrade conmonUpgrade podman-testsUpgrade fuse-overlayfsUpgrade criu-develUpgrade cockpit-podmanUpgrade golang-raceUpgrade go-toolsetUpgrade ipp-usbUpgrade grafanaUpgrade podman-pluginsUpgrade delveUpgrade git-lfsUpgrade crunUpgrade python3-podmanUpgrade slirp4netnsUpgrade osbuild-composer-coreUpgrade podman-dockerUpgrade netavarkUpgrade buildah-testsUpgrade criu-libs | Oct 22, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade ose-aws-ecr-image-credential-providerUpgrade openshift-kuryrUpgrade ose-crio-credential-providerUpgrade microshiftUpgrade ose-azure-acr-image-credential-providerUpgrade openshiftUpgrade cri-oUpgrade openshift-clientsUpgrade cri-tools | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade podman-tests-debuginfoUpgrade runcUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade osbuild-composer-debugsourceUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade go-fdo-server-debugsourceUpgrade golang-binUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade libslirp-debuginfoUpgrade critUpgrade osbuild-composer-worker-debuginfoUpgrade git-lfsUpgrade grafana-debugsourceUpgrade skopeo-testsUpgrade grafana-pcp-debugsourceUpgrade ipp-usbUpgrade containernetworking-pluginsUpgrade criu-develUpgrade image-builderUpgrade grafanaUpgrade osbuild-composerUpgrade go-toolsetUpgrade osbuild-composer-workerUpgrade opentelemetry-collectorUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade ipp-usb-debuginfoUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade go-fdo-serverUpgrade podman-remoteUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade golangUpgrade go-fdo-clientUpgrade oci-seccomp-bpf-hookUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade conmon-debugsourceUpgrade criu-libsUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade skopeo-debuginfoUpgrade go-fdo-client-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade grafana-selinuxUpgrade grafana-pcp-debuginfoUpgrade toolboxUpgrade osbuild-composer-core-debuginfoUpgrade delve-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade libslirpUpgrade go-fdo-server-debuginfoUpgrade go-fdo-client-debuginfoUpgrade git-lfs-debuginfoUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade podmanUpgrade skopeo-debugsourceUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade delve-debuginfoUpgrade buildah-testsUpgrade skopeoUpgrade criuUpgrade conmonUpgrade osbuild-composer-debuginfoUpgrade netavarkUpgrade libslirp-develUpgrade buildah-debugsourceUpgrade image-builder-debugsourceUpgrade image-builder-debuginfoUpgrade golang-raceUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-coreUpgrade grafana-pcp | Aug 28, 2026 | Aug 26, 2026 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22-srcUpgrade golang-1.22 | Oct 19, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub