Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade podman-catatonitUpgrade podman-dockerUpgrade golang-raceUpgrade skopeoUpgrade podman-testsUpgrade skopeo-testsUpgrade criuUpgrade golang-testsUpgrade podmanUpgrade conmonUpgrade criu-develUpgrade python3-podmanUpgrade slirp4netnsUpgrade crunUpgrade delveUpgrade netavarkUpgrade libslirpUpgrade udicaUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade buildah-testsUpgrade golang-binUpgrade libslirp-develUpgrade runcUpgrade cockpit-podmanUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade golangUpgrade golang-docsUpgrade criu-libsUpgrade golang-srcUpgrade toolbox-testsUpgrade critUpgrade podman-remoteUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade containers-commonUpgrade aardvark-dnsUpgrade golang-miscUpgrade fuse-overlayfs | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade golang-raceUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-sharedUpgrade golang-src | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-raceUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-misc | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade slirp4netnsUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade libslirpUpgrade conmon-debugsourceUpgrade podman-testsUpgrade conmonUpgrade go-toolsetUpgrade netavarkUpgrade golang-miscUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade golang-srcUpgrade buildah-debuginfoUpgrade containers-commonUpgrade golang-raceUpgrade libslirp-develUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade podman-dockerUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade podmanUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade delveUpgrade criuUpgrade runc-debugsourceUpgrade delve-debugsourceUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade critUpgrade criu-debugsourceUpgrade udicaUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade criu-develUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade skopeo-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade python3-criuUpgrade golang-docs | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade critUpgrade udicaUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade golang-testsUpgrade netavarkUpgrade podman-gvproxyUpgrade python3-podmanUpgrade podman-dockerUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade podmanUpgrade libslirpUpgrade cockpit-podmanUpgrade golangUpgrade criuUpgrade buildah-testsUpgrade buildahUpgrade golang-raceUpgrade slirp4netnsUpgrade runcUpgrade golang-miscUpgrade golang-binUpgrade podman-testsUpgrade golang-docsUpgrade containers-commonUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade skopeo-testsUpgrade go-toolsetUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade delveUpgrade podman-pluginsUpgrade conmonUpgrade python3-criuUpgrade libslirp-develUpgrade golang-srcUpgrade criu-develUpgrade skopeo | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade cri-oUpgrade openshiftUpgrade microshiftUpgrade openshift-clientsUpgrade runcUpgrade conmonUpgrade podmanUpgrade skopeo | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade golang-raceUpgrade podman-debugsourceUpgrade skopeoUpgrade container-selinuxUpgrade libslirp-develUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade runcUpgrade delve-debugsourceUpgrade delveUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade golang-binUpgrade podman-remoteUpgrade podman-pluginsUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade criu-develUpgrade golang-docsUpgrade python3-podmanUpgrade golang-testsUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade libslirp-debugsourceUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade podman-dockerUpgrade criuUpgrade crun-debuginfoUpgrade buildahUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade golang-miscNo solution existsUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade udicaUpgrade podman-testsUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade golang-srcUpgrade podman-gvproxy-debuginfoUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade python3-criu | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade podman-gvproxyUpgrade libslirpUpgrade python3-criuUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade golangUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade delve-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade netavarkUpgrade crunUpgrade containers-commonUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade delveUpgrade criuUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade criu-develUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade crun-debugsourceUpgrade runc-debuginfo | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.19-raceUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.20Upgrade go1.19Upgrade go1.20-docUpgrade go1.19-docUpgrade container-suseconnectUpgrade go1.20-raceUpgrade go1.18-opensslUpgrade go1.18-openssl-race | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.17Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.19Upgrade golang-1.17-goUpgrade golang-1.18-goUpgrade golang-1.20Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.20-srcUpgrade golang-1.17-srcUpgrade golang-1.18-srcUpgrade golang-1.19-srcUpgrade golang-1.19-goUpgrade golang-1.20-goUpgrade golang-1.18Upgrade golang-1.18-go (Ubuntu Pro) | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub