The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade podman-testsUpgrade podmanUpgrade podman-remoteUpgrade podman-dockerUpgrade grafanaUpgrade podman-gvproxy | May 4, 2022 | Jul 15, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golang-srcUpgrade golang-race | Aug 6, 2021 | Jul 15, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jul 15, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 15, 2021 |
| Centos_linux | — | Upgrade podman-remoteUpgrade golang-testsUpgrade podman-plugins-debuginfoUpgrade golangUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golang-miscUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade podmanUpgrade delve-debuginfoUpgrade delveUpgrade golang-srcUpgrade podman-gvproxyUpgrade podman-testsUpgrade golang-docsUpgrade go-toolsetUpgrade podman-dockerUpgrade grafana-debuginfoUpgrade golang-raceUpgrade grafana | Aug 12, 2021 | Jul 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Jul 15, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jul 12, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 4, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 28, 2021 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 12, 2021 | Jul 15, 2021 |
| Oracle_linux | — | Upgrade conmonUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade delveUpgrade criu-develUpgrade runcUpgrade python3-podmanUpgrade container-selinuxUpgrade containers-commonUpgrade golang-testsUpgrade skopeoUpgrade golang-raceUpgrade libslirpUpgrade libslirp-develUpgrade skopeo-testsUpgrade crunUpgrade podmanUpgrade podman-pluginsUpgrade critUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade golang-binUpgrade podman-testsUpgrade udicaUpgrade go-toolsetUpgrade podman-remoteUpgrade podman-gvproxyUpgrade golang-srcUpgrade golangUpgrade slirp4netnsUpgrade podman-dockerUpgrade podman-catatonitUpgrade buildah-testsUpgrade golang-miscUpgrade cockpit-podmanUpgrade buildahUpgrade python3-criuUpgrade fuse-overlayfsUpgrade netavarkUpgrade aardvark-dnsUpgrade criu | Aug 12, 2021 | Jul 13, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade ignitionUpgrade golang-github-prometheus-promuUpgrade atomic-openshift-service-idlerUpgrade openshift-clientsUpgrade containernetworking-pluginsUpgrade openshiftUpgrade cri-toolsUpgrade windows-machine-config-rhel8-operatorUpgrade redhat-release-coreosUpgrade cri-o | Aug 12, 2021 | Jul 13, 2021 |
| Redhat_linux | — | Upgrade crun-debugsourceUpgrade runcUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golangUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade golang-srcUpgrade critUpgrade container-selinuxUpgrade golang-binUpgrade delve-debuginfoNo solution existsUpgrade criu-libs-debuginfoUpgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade udicaUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade containers-commonUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade grafanaUpgrade python3-criuUpgrade go-toolsetUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade golang-testsUpgrade golang-raceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade slirp4netnsUpgrade skopeoUpgrade crunUpgrade podman-dockerUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade podman-catatonitUpgrade python3-podmanUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade grafana-debuginfoUpgrade golang-miscUpgrade podmanUpgrade podman-pluginsUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade skopeo-testsUpgrade podman-testsUpgrade conmonUpgrade delveUpgrade criu-debuginfoUpgrade criu-libs | Aug 12, 2021 | Jul 15, 2021 |
| Rocky_linux | — | Upgrade runcUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade delveUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade golang-binUpgrade toolbox-testsUpgrade go-toolsetUpgrade conmonUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade aardvark-dnsUpgrade delve-debugsourceUpgrade containers-commonUpgrade golangUpgrade delve-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade netavarkUpgrade libslirp-develUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade grafanaUpgrade conmon-debugsource | Mar 12, 2024 | Jul 15, 2021 |
| Suse | — | Upgrade go1.15-raceUpgrade go1.16-docUpgrade go1.15-docUpgrade go1.15Upgrade go1.16Upgrade go1.16-race | Jul 20, 2021 | Jul 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub