The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade podman-gvproxyUpgrade grafanaUpgrade podman-dockerUpgrade podmanUpgrade podman-pluginsUpgrade podman-tests | May 4, 2022 | Jul 15, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-race | Aug 6, 2021 | Jul 15, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jul 15, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 15, 2021 |
| Centos_linux | — | Upgrade golang-srcUpgrade delveUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade golangUpgrade delve-debugsourceUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade delve-debuginfoUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golang-miscUpgrade golang-testsUpgrade podman-testsUpgrade go-toolsetUpgrade grafanaUpgrade grafana-debuginfoUpgrade podman-dockerUpgrade golang-docsUpgrade podman-gvproxyUpgrade golang-race | Aug 12, 2021 | Jul 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Jul 15, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jul 12, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Dec 28, 2021 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 12, 2021 | Jul 15, 2021 |
| Oracle_linux | — | Upgrade podmanUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade skopeo-testsUpgrade crunUpgrade skopeoUpgrade container-selinuxUpgrade delveUpgrade golang-docsUpgrade grafanaUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade criu-develUpgrade libslirp-develUpgrade golang-raceUpgrade podman-testsUpgrade podman-pluginsUpgrade udicaUpgrade runcUpgrade critUpgrade criu-libsUpgrade golang-testsUpgrade golang-binUpgrade containers-commonUpgrade buildahUpgrade netavarkUpgrade golang-miscUpgrade golang-srcUpgrade fuse-overlayfsUpgrade python3-criuUpgrade aardvark-dnsUpgrade criuUpgrade cockpit-podmanUpgrade podman-remoteUpgrade golangUpgrade podman-catatonitUpgrade buildah-testsUpgrade podman-dockerUpgrade go-toolsetUpgrade slirp4netnsUpgrade podman-gvproxy | Aug 12, 2021 | Jul 13, 2021 |
| Redhat Openshift | — | Upgrade redhat-release-coreosUpgrade cri-toolsUpgrade windows-machine-config-rhel8-operatorUpgrade cri-oUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idlerUpgrade openshift-clientsUpgrade golang-github-prometheus-promuUpgrade ignitionUpgrade openshiftUpgrade butane | Aug 12, 2021 | Jul 13, 2021 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade cockpit-podmanUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade containers-commonUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade golang-srcUpgrade critNo solution existsUpgrade python3-criuUpgrade podman-debuginfoUpgrade delve-debuginfoUpgrade golangUpgrade grafanaUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade libslirp-debuginfoUpgrade udicaUpgrade conmon-debuginfoUpgrade golang-binUpgrade go-toolsetUpgrade container-selinuxUpgrade runcUpgrade runc-debugsourceUpgrade buildahUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade golang-raceUpgrade conmonUpgrade delveUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade golang-miscUpgrade netavarkUpgrade podmanUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfsUpgrade delve-debugsourceUpgrade crunUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade podman-testsUpgrade crun-debuginfoUpgrade podman-dockerUpgrade golang-testsUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade python3-podmanUpgrade criu-libs | Aug 12, 2021 | Jul 15, 2021 |
| Rocky_linux | — | Upgrade toolbox-debugsourceUpgrade crunUpgrade toolbox-debuginfoUpgrade libslirpUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade delveUpgrade slirp4netnsUpgrade go-toolsetUpgrade golang-raceUpgrade golangUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade grafanaUpgrade netavarkUpgrade delve-debugsourceUpgrade containers-commonUpgrade runc-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade grafana-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debugsource | Mar 12, 2024 | Jul 15, 2021 |
| Suse | — | Upgrade go1.16-raceUpgrade go1.16Upgrade go1.15Upgrade go1.16-docUpgrade go1.15-raceUpgrade go1.15-doc | Jul 20, 2021 | Jul 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub