The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade podman-pluginsUpgrade podman-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade podman-remoteUpgrade grafana | May 4, 2022 | Jul 15, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade golang-miscUpgrade golang-race | Aug 6, 2021 | Jul 15, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jul 15, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 15, 2021 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade podman-gvproxyUpgrade golang-raceUpgrade grafanaUpgrade go-toolsetUpgrade podman-testsUpgrade golang-docsUpgrade podman-dockerUpgrade golang-srcUpgrade golang-binUpgrade podman-remoteUpgrade delve-debuginfoUpgrade delveUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade podmanUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade podman-debugsourceUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade podman-remote-debuginfo | Aug 12, 2021 | Jul 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Jul 15, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jul 12, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 28, 2021 | Jul 15, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 12, 2021 | Jul 15, 2021 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade podman-catatonitUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade python3-criuUpgrade go-toolsetUpgrade fuse-overlayfsUpgrade netavarkUpgrade podman-dockerUpgrade cockpit-podmanUpgrade criuUpgrade aardvark-dnsUpgrade buildahUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade conmonUpgrade grafanaUpgrade podman-pluginsUpgrade criu-libsUpgrade critUpgrade libslirpUpgrade runcUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade skopeo-testsUpgrade container-selinuxUpgrade golang-testsUpgrade skopeoUpgrade golang-binUpgrade criu-develUpgrade containers-commonUpgrade udicaUpgrade podman-testsUpgrade podmanUpgrade golang-docsUpgrade crunUpgrade golang-race | Aug 12, 2021 | Jul 13, 2021 |
| Redhat Openshift | — | Upgrade cri-oUpgrade openshift4-wincw/windows-machine-config-rhel8-operatorUpgrade cri-toolsUpgrade redhat-release-coreosUpgrade openshiftUpgrade golang-github-prometheus-promuUpgrade ignitionUpgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade butaneUpgrade openshift-clients | Aug 12, 2021 | Jul 15, 2021 |
| Redhat_linux | — | Upgrade criuUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade skopeoUpgrade crunUpgrade podman-catatonitUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade delveUpgrade golang-raceUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade criu-develUpgrade delve-debugsourceUpgrade podman-testsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade conmonUpgrade conmon-debugsourceUpgrade golang-testsUpgrade criu-libsUpgrade golang-miscUpgrade netavarkUpgrade podman-dockerUpgrade golang-srcUpgrade podman-plugins-debuginfoUpgrade critNo solution existsUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade runcUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade buildah-testsUpgrade udicaUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade grafanaUpgrade podman-remoteUpgrade delve-debuginfoUpgrade python3-criuUpgrade go-toolsetUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade container-selinux | Aug 12, 2021 | Jul 15, 2021 |
| Rocky_linux | — | Upgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade conmonUpgrade crunUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade golang-binUpgrade libslirpUpgrade toolbox-debugsourceUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade delve-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade delve-debugsourceUpgrade runc-debuginfoUpgrade netavarkUpgrade crun-debuginfoUpgrade grafanaUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade golang-raceUpgrade conmon-debugsourceUpgrade grafana-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook | Mar 12, 2024 | Jul 15, 2021 |
| Suse | — | Upgrade go1.16-docUpgrade go1.15-docUpgrade go1.15-raceUpgrade go1.15Upgrade go1.16Upgrade go1.16-race | Jul 20, 2021 | Jul 15, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub