Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade go-toolsetUpgrade toolbox-testsUpgrade libslirp-develUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade podman-remoteUpgrade containers-commonUpgrade critUpgrade fuse-overlayfsUpgrade criu-libsUpgrade runcUpgrade buildahUpgrade golang-binUpgrade golang-srcUpgrade buildah-testsUpgrade golangUpgrade golang-docsUpgrade podman-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade udicaUpgrade criu-develUpgrade podman-gvproxyUpgrade golang-testsUpgrade netavarkUpgrade libslirpUpgrade podmanUpgrade conmonUpgrade podman-pluginsUpgrade delveUpgrade skopeoUpgrade python3-podmanUpgrade golang-raceUpgrade skopeo-testsUpgrade toolboxUpgrade crunUpgrade podman-catatonitUpgrade criu | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-sharedUpgrade golang-testsUpgrade golang-raceUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade containerd | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-sharedUpgrade golang-srcUpgrade golang-docsUpgrade golang-race | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade golangUpgrade python3-podmanUpgrade libslirpUpgrade criu-libsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade conmonUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade buildah-testsUpgrade golang-srcUpgrade libslirp-develUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade podman-testsUpgrade golang-miscUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade toolboxUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade runc-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade golang-raceUpgrade cockpit-podmanUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade delveUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade libslirp-debugsourceUpgrade criu-develUpgrade critUpgrade criu-debugsourceUpgrade udicaUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade golang-testsUpgrade runcUpgrade python3-criuUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade skopeo-debugsourceUpgrade podman-remote-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade criuUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade fuse-overlayfsUpgrade delve-debugsourceUpgrade crunUpgrade toolbox-tests | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade golangUpgrade aardvark-dnsUpgrade python3-podmanUpgrade buildah-testsUpgrade runcUpgrade podmanUpgrade podman-dockerUpgrade criuUpgrade cockpit-podmanUpgrade golang-raceUpgrade critUpgrade golang-binUpgrade buildahUpgrade golang-miscUpgrade libslirpUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-testsUpgrade golang-docsUpgrade podman-remoteUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade udicaUpgrade golang-testsUpgrade criu-libsUpgrade podman-pluginsUpgrade golang-srcUpgrade conmonUpgrade delveUpgrade crunUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade go-toolsetUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade python3-criuUpgrade libslirp-develUpgrade containers-common | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade cri-oUpgrade openshift-clientsUpgrade conmonUpgrade runcUpgrade skopeoUpgrade openshiftUpgrade microshiftUpgrade podman | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debuginfoUpgrade podman-catatonitUpgrade go-toolsetUpgrade cockpit-podmanUpgrade python3-criuUpgrade criuUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade udicaUpgrade podman-testsUpgrade golang-miscNo solution existsUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade golangUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade golang-srcUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade buildahUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-remoteUpgrade delve-debuginfoUpgrade toolbox-debuginfoUpgrade containers-commonUpgrade delveUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podmanUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade slirp4netns-debuginfoUpgrade golang-docsUpgrade runcUpgrade criu-libsUpgrade golang-testsUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade libslirp-develUpgrade delve-debugsourceUpgrade criu-develUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade podman-debuginfoUpgrade golang-binUpgrade podman-remote-debuginfo | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade golangUpgrade conmon-debuginfoUpgrade python3-criuUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade buildah-testsUpgrade aardvark-dnsUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-raceUpgrade criu-develUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-pluginsUpgrade criuUpgrade delve-debuginfoUpgrade conmonUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade libslirp-develUpgrade crun-debugsourceUpgrade containers-commonUpgrade crunUpgrade runcUpgrade netavarkUpgrade runc-debuginfoUpgrade critUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade podman | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.19-docUpgrade go1.20-raceUpgrade container-suseconnectUpgrade go1.18-opensslUpgrade go1.18-openssl-raceUpgrade go1.20-docUpgrade go1.18-docUpgrade go1.19Upgrade go1.20Upgrade go1.18-raceUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.19-race | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.18-srcUpgrade golang-1.20-goUpgrade golang-1.19-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.19Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.17-srcUpgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.18-go | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub