Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade golang-testsUpgrade podmanUpgrade crunUpgrade podman-gvproxyUpgrade python3-podmanUpgrade podman-dockerUpgrade udicaUpgrade golang-raceUpgrade skopeo-testsUpgrade skopeoUpgrade podman-pluginsUpgrade slirp4netnsUpgrade conmonUpgrade delveUpgrade libslirpUpgrade podman-testsUpgrade criu-develUpgrade toolboxUpgrade podman-catatonitUpgrade netavarkUpgrade buildah-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade runcUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade criu-libsUpgrade go-toolsetUpgrade containers-commonUpgrade container-selinuxUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade buildahUpgrade toolbox-testsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade golangUpgrade golang-docs | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang-sharedUpgrade golangUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade containerdUpgrade golang-race | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-raceUpgrade golang-binUpgrade golang-sharedUpgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade delveUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade aardvark-dnsUpgrade runcUpgrade podman-remote-debuginfoUpgrade toolbox-testsUpgrade crunUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade podmanUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade udicaUpgrade runc-debugsourceUpgrade toolbox-debugsourceUpgrade buildahUpgrade criu-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade golang-raceUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade python3-criuUpgrade podman-testsUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade go-toolsetUpgrade conmonUpgrade criuUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade python3-podmanUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade podman-dockerUpgrade containers-commonUpgrade buildah-debuginfoUpgrade criu-libsUpgrade libslirpUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfo | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade golang-raceUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade golangUpgrade aardvark-dnsUpgrade golang-testsUpgrade python3-podmanUpgrade libslirpUpgrade slirp4netnsUpgrade netavarkUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-testsUpgrade cockpit-podmanUpgrade golang-docsUpgrade golang-miscUpgrade udicaUpgrade criuUpgrade buildahUpgrade podmanUpgrade podman-remoteUpgrade critUpgrade golang-binUpgrade fuse-overlayfsUpgrade runcUpgrade python3-criuUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade golang-srcUpgrade libslirp-develUpgrade criu-develUpgrade go-toolsetUpgrade container-selinuxUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade delveUpgrade podman-pluginsUpgrade containers-commonUpgrade crun | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade cri-oUpgrade cri-toolsUpgrade podmanUpgrade microshiftUpgrade runcUpgrade conmonUpgrade openshift-clientsUpgrade skopeoUpgrade openshift | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade python3-criuUpgrade podman-catatonitUpgrade conmon-debuginfoUpgrade podman-testsUpgrade udicaUpgrade golangUpgrade skopeo-debugsourceUpgrade libslirpUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade golang-miscNo solution existsUpgrade buildah-testsUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade criuUpgrade podman-dockerUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade toolbox-debugsourceUpgrade delve-debuginfoUpgrade podman-debuginfoUpgrade netavarkUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade golang-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade toolboxUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade golang-raceUpgrade runc-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade criu-develUpgrade criu-libsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade golang-binUpgrade podman-remoteUpgrade golang-docsUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade crunUpgrade critUpgrade podman-catatonit-debuginfoUpgrade delveUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade container-selinux | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade buildahUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade buildah-testsUpgrade podman-debugsourceUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade golangUpgrade podman-testsUpgrade python3-criuUpgrade fuse-overlayfsUpgrade libslirpUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade conmonUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade containers-commonUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade libslirp-develUpgrade crun-debugsourceUpgrade crunUpgrade delveUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade criuUpgrade criu-develUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golang-raceUpgrade criu-libsUpgrade critUpgrade podman-catatonitUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade conmon-debugsourceUpgrade podmanUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade podman-remoteUpgrade buildah-debugsource | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.19-docUpgrade container-suseconnectUpgrade go1.18-openssl-raceUpgrade go1.18-opensslUpgrade go1.20-raceUpgrade go1.18-docUpgrade go1.19Upgrade go1.20Upgrade go1.20-docUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18Upgrade go1.19-race | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.19-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.19-goUpgrade golang-1.20-goUpgrade golang-1.18-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.18-goUpgrade golang-1.20Upgrade golang-1.17-srcUpgrade golang-1.17Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-go | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub