Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade skopeoUpgrade buildahUpgrade podman-dockerUpgrade podman-remoteUpgrade toolbox-testsUpgrade criuUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podman-catatonitUpgrade podmanUpgrade buildah-testsUpgrade runcUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade podman-testsUpgrade udicaUpgrade critUpgrade container-selinuxUpgrade containers-commonUpgrade python3-criuUpgrade python3-podmanUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade skopeo-testsUpgrade conmonUpgrade criu-libsUpgrade slirp4netnsUpgrade podman-pluginsUpgrade libslirpUpgrade libslirp-develUpgrade podman-gvproxy | May 15, 2023 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade go-rpm-templatesUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-macrosUpgrade golistUpgrade go-srpm-macrosUpgrade golang-sharedUpgrade golang-miscUpgrade golist-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade runc-debuginfoUpgrade golang-googlecode-net-develUpgrade golangUpgrade golang-github-kr-pty-develUpgrade golang-googlecode-sqlite-develUpgrade runcUpgrade golang-srcUpgrade golang-binUpgrade go-filesystemUpgrade golang-docsUpgrade golang-github-gorilla-context-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-tests | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-docsUpgrade golist-debuginfoUpgrade golang-srcUpgrade golang-sharedUpgrade golistUpgrade golang-binUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golang-testsUpgrade golang-raceUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-devel | Feb 17, 2025 | Jun 2, 2022 |
| Centos_linux | — | Upgrade criu-libs-debuginfoUpgrade golangUpgrade buildahUpgrade golang-miscUpgrade aardvark-dnsUpgrade criuUpgrade golang-docsUpgrade podman-catatonitUpgrade podman-remoteUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade skopeoUpgrade netavarkUpgrade criu-debuginfoUpgrade python3-podmanUpgrade criu-debugsourceUpgrade podmanUpgrade conmonUpgrade golang-binUpgrade containernetworking-pluginsUpgrade critUpgrade buildah-testsUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade udicaUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade podman-dockerUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade golang-testsUpgrade criu-libsUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade libslirp-develUpgrade podman-pluginsUpgrade skopeo-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-srcUpgrade crunUpgrade toolbox-debuginfoUpgrade go-toolsetUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade container-selinuxUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade python3-criuUpgrade podman-testsUpgrade delve-debuginfoUpgrade containers-commonUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delveUpgrade fuse-overlayfs-debugsource | Nov 9, 2022 | Aug 10, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jun 7, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade conmonUpgrade buildahUpgrade criuUpgrade python3-criuUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade libslirpUpgrade podman-testsUpgrade golangUpgrade cockpit-podmanUpgrade udicaUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade aardvark-dnsUpgrade golang-raceUpgrade slirp4netnsUpgrade container-selinuxUpgrade crunUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade golang-srcUpgrade criu-develUpgrade containers-commonUpgrade skopeo-testsUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade podman-catatonitUpgrade podman-remoteUpgrade golang-binUpgrade criu-libsUpgrade podmanUpgrade golang-docsUpgrade delveUpgrade golang-miscUpgrade critUpgrade skopeoUpgrade libslirp-develUpgrade golang-tests | Jul 13, 2022 | Jun 2, 2022 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operatorUpgrade cri-toolsUpgrade butaneUpgrade cri-oUpgrade ignitionUpgrade skopeoUpgrade podman | Aug 26, 2022 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade libslirp-debuginfoUpgrade golang-binUpgrade slirp4netns-debugsourceUpgrade golang-docsUpgrade podman-testsUpgrade conmonUpgrade delveUpgrade podman-remoteUpgrade skopeo-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade podman-catatonitUpgrade criuUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade buildah-testsNo solution existsUpgrade toolbox-debugsourceUpgrade critUpgrade skopeoUpgrade runcUpgrade container-selinuxUpgrade podman-debugsourceUpgrade criu-develUpgrade podman-gvproxyUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade libslirpUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade crunUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade python3-podmanUpgrade delve-debuginfoUpgrade golangUpgrade libslirp-develUpgrade golang-raceUpgrade golang-srcUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade criu-libsUpgrade netavarkUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade buildahUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-misc | Nov 9, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade criuUpgrade golangUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade golang-binUpgrade delve-debuginfoUpgrade criu-libs-debuginfoUpgrade critUpgrade golang-raceUpgrade criu-develUpgrade libslirpUpgrade delve-debugsourceUpgrade delveUpgrade libslirp-debugsourceUpgrade python3-criu | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.18Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.17 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.18 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub