The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade podman-testsUpgrade podmanUpgrade podman-gvproxyUpgrade podman-remoteUpgrade podman-dockerUpgrade grafana | May 4, 2022 | Jul 15, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade golang-miscUpgrade golang-src | Aug 6, 2021 | Jul 15, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jul 15, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 15, 2021 |
| Centos_linux | — | Upgrade podman-pluginsUpgrade golangUpgrade podman-catatonit-debuginfoUpgrade delve-debuginfoUpgrade golang-binUpgrade delveUpgrade delve-debugsourceUpgrade golang-srcUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade golang-miscUpgrade podman-remoteUpgrade grafana-debuginfoUpgrade grafanaUpgrade go-toolsetUpgrade podman-testsUpgrade podman-dockerUpgrade golang-docsUpgrade podman-gvproxyUpgrade golang-race | Aug 12, 2021 | Jul 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Jul 15, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jul 12, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 28, 2021 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 12, 2021 | Jul 15, 2021 |
| Oracle_linux | — | Upgrade crunUpgrade runcUpgrade udicaUpgrade libslirpUpgrade critUpgrade criu-libsUpgrade podman-pluginsUpgrade grafanaUpgrade golang-testsUpgrade container-selinuxUpgrade delveUpgrade libslirp-develUpgrade conmonUpgrade skopeo-testsUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade criu-develUpgrade containers-commonUpgrade golang-binUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade golang-docsUpgrade podmanUpgrade python3-podmanUpgrade golang-miscUpgrade cockpit-podmanUpgrade buildahUpgrade buildah-testsUpgrade podman-remoteUpgrade podman-dockerUpgrade criuUpgrade golangUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade golang-srcUpgrade go-toolsetUpgrade netavarkUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-catatonit | Aug 12, 2021 | Jul 13, 2021 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clientsUpgrade golang-github-prometheus-promuUpgrade ignitionUpgrade butaneUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idlerUpgrade windows-machine-config-rhel8-operatorUpgrade redhat-release-coreosUpgrade cri-oUpgrade cri-tools | Aug 12, 2021 | Jul 13, 2021 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade go-toolsetUpgrade udicaUpgrade podman-remoteUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade critUpgrade cockpit-podmanUpgrade containers-commonUpgrade golang-srcNo solution existsUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade buildahUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-testsUpgrade golang-binUpgrade runc-debuginfoUpgrade grafanaUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade golang-docsUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade criu-libsUpgrade libslirp-develUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade golang-miscUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade golang-raceUpgrade crunUpgrade conmonUpgrade delveUpgrade skopeoUpgrade skopeo-testsUpgrade podman-testsUpgrade slirp4netnsUpgrade criuUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade criu-develUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade grafana-debuginfoUpgrade netavarkUpgrade podmanUpgrade podman-pluginsUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade golang-testsUpgrade buildah-debugsource | Aug 12, 2021 | Jul 15, 2021 |
| Rocky_linux | — | Upgrade grafanaUpgrade golang-raceUpgrade crun-debuginfoUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade golangUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade delve-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade crunUpgrade delveUpgrade slirp4netns-debugsourceUpgrade go-toolsetUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade conmonUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade libslirp-debuginfoUpgrade conmon-debuginfo | Mar 12, 2024 | Jul 15, 2021 |
| Suse | — | Upgrade go1.15-raceUpgrade go1.15-docUpgrade go1.16-docUpgrade go1.15Upgrade go1.16-raceUpgrade go1.16 | Jul 20, 2021 | Jul 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub