Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-sharedUpgrade golang-docs | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clientsUpgrade ose-azure-acr-image-credential-providerUpgrade cri-oUpgrade cri-toolsUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-crio-credential-provider | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade criuUpgrade flightctl-selinuxUpgrade grafana-debuginfoUpgrade ose-gcp-gcr-image-credential-providerUpgrade ignitionUpgrade yggdrasil-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade flightctl-cliUpgrade cri-oUpgrade podman-remote-debuginfoUpgrade ignition-debuginfoUpgrade osbuild-composerUpgrade image-builderUpgrade crun-debuginfoUpgrade buildahUpgrade conmon-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade libslirp-develUpgrade ipp-usbUpgrade rhc-worker-playbook-debuginfoUpgrade image-builder-debugsourceUpgrade podman-remoteUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade containers-commonUpgrade git-lfs-debuginfoUpgrade golang-testsUpgrade go-toolsetUpgrade yggdrasil-develUpgrade podman-debuginfoUpgrade ignition-validate-debuginfoUpgrade buildah-testsUpgrade netavarkUpgrade aardvark-dnsUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade rhc-develUpgrade delve-debuginfoUpgrade ignition-grubUpgrade grafana-selinuxUpgrade rhcUpgrade rhc-debugsourceUpgrade opentelemetry-collectorUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade buildah-debuginfoUpgrade rhc-worker-playbookUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade podman-catatonitUpgrade grafana-pcpUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade cri-o-debuginfoUpgrade crun-debugsourceUpgrade criu-libsUpgrade go-fdo-server-ownerUpgrade criu-debugsourceUpgrade osbuild-composer-coreUpgrade golangUpgrade criu-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade ignition-edgeUpgrade go-fdo-server-manufacturerUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade skopeo-debugsourceUpgrade yggdrasil-debugsourceUpgrade crunUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-pluginsUpgrade runcUpgrade go-fdo-client-debuginfoUpgrade flightctl-servicesUpgrade python3-criuUpgrade grafanaUpgrade toolbox-testsUpgrade criu-develUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade image-builder-debuginfoUpgrade ipp-usb-debuginfoUpgrade golang-raceUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-debugsourceUpgrade go-fdo-server-debuginfoUpgrade cri-o-debugsourceUpgrade git-lfsUpgrade flightctl-observabilityUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade podman-tests-debuginfoUpgrade skopeo-debuginfoUpgrade go-fdo-server-debugsourceUpgrade go-fdo-serverUpgrade go-fdo-clientUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade ignition-validateUpgrade golang-binUpgrade delve-debugsourceUpgrade go-fdo-client-debugsourceUpgrade grafana-pcp-debugsourceUpgrade flightctl-agentUpgrade podmanUpgrade osbuild-composer-workerUpgrade libslirpUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade go-fdo-server-rendezvousUpgrade buildah-debugsourceUpgrade osbuild-composer-debuginfoUpgrade libslirp-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade yggdrasilUpgrade slirp4netns-debugsourceUpgrade toolbox-debugsourceUpgrade rhc-debuginfoUpgrade ignition-debugsourceUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade podman-dockerUpgrade golang-docsUpgrade delveUpgrade podman-gvproxyUpgrade yggdrasil-examples-debuginfoUpgrade udicaUpgrade oci-seccomp-bpf-hook-debuginfoNo solution existsUpgrade toolboxUpgrade skopeoUpgrade git-lfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade grafana-debugsource | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade image-builder-debuginfoUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade git-lfs-debugsourceUpgrade golang-raceUpgrade golangUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade go-fdo-server-debuginfoUpgrade libslirpUpgrade criu-debuginfoUpgrade image-builder-debugsourceUpgrade runc-debugsourceUpgrade osbuild-composer-coreUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade grafana-pcp-debuginfoUpgrade containers-commonUpgrade criu-libsUpgrade grafana-selinuxUpgrade go-fdo-clientUpgrade go-fdo-client-debugsourceUpgrade grafana-pcpUpgrade osbuild-composer-core-debuginfoUpgrade buildah-debugsourceUpgrade delve-debuginfoUpgrade skopeoUpgrade podman-catatonitUpgrade libslirp-develUpgrade netavarkUpgrade osbuild-composer-debuginfoUpgrade toolboxUpgrade crun-debugsourceUpgrade git-lfs-debuginfoUpgrade grafana-debuginfoUpgrade podman-gvproxyUpgrade skopeo-debugsourceUpgrade podmanUpgrade slirp4netnsUpgrade go-fdo-client-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade buildah-testsUpgrade conmonUpgrade fuse-overlayfsUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade crunUpgrade critUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade grafana-debugsourceUpgrade osbuild-composer-workerUpgrade golang-binUpgrade go-toolsetUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade osbuild-composerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade git-lfsUpgrade toolbox-debugsourceUpgrade go-fdo-serverUpgrade python3-criuUpgrade osbuild-composer-debugsourceUpgrade ipp-usbUpgrade delveUpgrade skopeo-testsUpgrade podman-pluginsUpgrade opentelemetry-collectorUpgrade runcUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debugsourceUpgrade go-fdo-server-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade ipp-usb-debuginfoUpgrade image-builderUpgrade grafana-pcp-debugsourceUpgrade criu-devel | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub