The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-dockerUpgrade podman-remoteUpgrade grafanaUpgrade podman-gvproxy | May 4, 2022 | Jul 15, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-race | Aug 6, 2021 | Jul 15, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jul 15, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 15, 2021 |
| Centos_linux | — | Upgrade go-toolsetUpgrade podman-gvproxyUpgrade grafana-debuginfoUpgrade golang-raceUpgrade golang-docsUpgrade podman-dockerUpgrade podman-testsUpgrade grafanaUpgrade golang-srcUpgrade podmanUpgrade podman-remoteUpgrade podman-debugsourceUpgrade golang-testsUpgrade golang-miscUpgrade delveUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade delve-debuginfoUpgrade podman-plugins-debuginfo | Aug 12, 2021 | Jul 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Jul 15, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jul 12, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 4, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 28, 2021 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 12, 2021 | Jul 15, 2021 |
| Oracle_linux | — | Upgrade buildahUpgrade cockpit-podmanUpgrade criuUpgrade python3-criuUpgrade netavarkUpgrade golangUpgrade podman-remoteUpgrade aardvark-dnsUpgrade buildah-testsUpgrade golang-miscUpgrade podman-dockerUpgrade golang-srcUpgrade go-toolsetUpgrade slirp4netnsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade containers-commonUpgrade podman-testsUpgrade criu-develUpgrade skopeoUpgrade golang-raceUpgrade golang-docsUpgrade crunUpgrade conmonUpgrade python3-podmanUpgrade udicaUpgrade podmanUpgrade podman-pluginsUpgrade container-selinuxUpgrade skopeo-testsUpgrade delveUpgrade containernetworking-pluginsUpgrade grafanaUpgrade runcUpgrade libslirpUpgrade criu-libsUpgrade critUpgrade libslirp-develUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade golang-tests | Aug 12, 2021 | Jul 13, 2021 |
| Redhat Openshift | — | Upgrade cri-oUpgrade windows-machine-config-rhel8-operatorUpgrade redhat-release-coreosUpgrade cri-toolsUpgrade golang-github-prometheus-promuUpgrade containernetworking-pluginsUpgrade openshift-clientsUpgrade openshiftUpgrade ignitionUpgrade butaneUpgrade atomic-openshift-service-idler | Aug 12, 2021 | Jul 13, 2021 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade conmon-debugsourceUpgrade conmonUpgrade golang-testsUpgrade slirp4netnsUpgrade golang-miscUpgrade podman-testsUpgrade podman-gvproxyUpgrade skopeoUpgrade toolbox-testsUpgrade golang-binUpgrade criu-debugsourceUpgrade containers-commonUpgrade container-selinuxUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade buildahUpgrade podman-remoteUpgrade golang-docsUpgrade delve-debuginfoUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade runcUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade grafanaUpgrade runc-debuginfoUpgrade python3-criuUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade criu-develUpgrade podman-dockerUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade delveUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade podmanUpgrade python3-podmanUpgrade toolboxUpgrade criu-libsUpgrade podman-catatonitUpgrade golang-raceUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade crunUpgrade criu | Aug 12, 2021 | Jul 15, 2021 |
| Rocky_linux | — | Upgrade delveUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade golang-binUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade libslirp-debuginfoUpgrade slirp4netnsUpgrade libslirpUpgrade toolbox-testsUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade toolbox-debuginfoUpgrade grafana-debuginfoUpgrade grafanaUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade golangUpgrade golang-raceUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade containers-commonUpgrade delve-debugsource | Mar 12, 2024 | Jul 15, 2021 |
| Suse | — | Upgrade go1.15-docUpgrade go1.16-docUpgrade go1.15-raceUpgrade go1.15Upgrade go1.16Upgrade go1.16-race | Jul 20, 2021 | Jul 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub