Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.
CVSS Details
- CVSS 3.1 Base Score: 3.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade runcUpgrade buildah-testsUpgrade podman-remoteUpgrade podman-testsUpgrade aardvark-dnsUpgrade udicaUpgrade cockpit-podmanUpgrade podman-dockerUpgrade criuUpgrade fuse-overlayfsUpgrade toolboxUpgrade podman-catatonitUpgrade podmanUpgrade toolbox-testsUpgrade netavarkUpgrade buildahUpgrade critUpgrade containernetworking-pluginsUpgrade skopeoUpgrade skopeo-testsUpgrade libslirp-develUpgrade criu-develUpgrade containers-commonUpgrade slirp4netnsUpgrade podman-pluginsUpgrade crunUpgrade python3-criuUpgrade python3-podmanUpgrade criu-libsUpgrade libslirpUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade container-selinux | May 15, 2023 | Aug 10, 2022 |
| Alpine Linux | — | Upgrade go | Oct 1, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-googlecode-sqlite-develUpgrade golang-github-gorilla-context-develUpgrade golang-binUpgrade golang-srcUpgrade golang-googlecode-net-develUpgrade golang-testsUpgrade golang-docsUpgrade runcUpgrade golang-github-kr-pty-develUpgrade go-filesystemUpgrade golangUpgrade golang-github-syndtr-gocapability-develUpgrade golang-raceUpgrade go-rpm-templatesUpgrade golang-miscUpgrade go-rpm-macrosUpgrade golist-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade go-srpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade runc-debuginfoUpgrade golistUpgrade golang-shared | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-raceUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-testsUpgrade golang-miscUpgrade golist-debugsourceUpgrade golang-sharedUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golist-debuginfoUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golangUpgrade golistUpgrade golang-docs | Feb 17, 2025 | Jun 2, 2022 |
| Centos_linux | — | Upgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade buildahUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade python3-podmanUpgrade conmonUpgrade runcUpgrade criu-libs-debuginfoUpgrade netavarkUpgrade golang-raceUpgrade golangUpgrade golang-testsUpgrade criuUpgrade golang-binUpgrade critUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade criu-debuginfoUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade toolbox-testsUpgrade skopeoUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade aardvark-dnsUpgrade golang-docsUpgrade toolboxUpgrade go-toolsetUpgrade skopeo-debuginfoUpgrade delveUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade crunUpgrade golang-srcUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade container-selinuxUpgrade criu-develUpgrade delve-debuginfoUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade podman-testsUpgrade python3-criuUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade libslirpUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade slirp4netnsUpgrade crun-debugsource | Nov 9, 2022 | Aug 10, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jun 7, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade containers-commonUpgrade podman-catatonitUpgrade criu-develUpgrade critUpgrade golang-testsUpgrade libslirp-develUpgrade golang-binUpgrade crunUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade runcUpgrade podman-pluginsUpgrade golang-srcUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade delveUpgrade golang-docsUpgrade golang-miscUpgrade podmanUpgrade podman-gvproxyUpgrade container-selinuxUpgrade aardvark-dnsUpgrade go-toolsetUpgrade buildahUpgrade criuUpgrade conmonUpgrade golangUpgrade udicaUpgrade golang-raceUpgrade slirp4netnsUpgrade buildah-testsUpgrade cockpit-podmanUpgrade libslirpUpgrade python3-criuUpgrade python3-podmanUpgrade podman-testsUpgrade podman-dockerUpgrade fuse-overlayfs | Jul 13, 2022 | Jun 2, 2022 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeoUpgrade ignitionUpgrade windows-machine-config-rhel8-operatorUpgrade butaneUpgrade cri-oUpgrade cri-tools | Aug 26, 2022 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade golang-binUpgrade critUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade toolbox-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade delveUpgrade podman-catatonitUpgrade toolboxUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade crunUpgrade skopeoUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade podmanUpgrade python3-criuUpgrade toolbox-testsUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade udicaUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade libslirpUpgrade buildah-debugsourceUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade podman-remoteUpgrade skopeo-debuginfoNo solution existsUpgrade skopeo-testsUpgrade runcUpgrade python3-podmanUpgrade golangUpgrade go-toolsetUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade golang-srcUpgrade fuse-overlayfsUpgrade buildahUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade netavarkUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade runc-debugsource | Nov 9, 2022 | Aug 10, 2022 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade criuUpgrade libslirp-debuginfoUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-binUpgrade golangUpgrade criu-libsUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade golang-raceUpgrade python3-criuUpgrade criu-develUpgrade critUpgrade libslirp-debugsourceUpgrade delveUpgrade libslirp | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.18Upgrade go1.17-docUpgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-goUpgrade golang-1.18Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub