Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-dockerUpgrade golang-raceUpgrade toolboxUpgrade crunUpgrade libslirpUpgrade skopeoUpgrade skopeo-testsUpgrade podman-testsUpgrade podmanUpgrade udicaUpgrade slirp4netnsUpgrade criuUpgrade delveUpgrade conmonUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade golang-testsUpgrade netavarkUpgrade python3-podmanUpgrade podman-pluginsUpgrade criu-develUpgrade aardvark-dnsUpgrade runcUpgrade buildahUpgrade critUpgrade golang-srcUpgrade toolbox-testsUpgrade containers-commonUpgrade cockpit-podmanUpgrade container-selinuxUpgrade fuse-overlayfsUpgrade golang-miscUpgrade podman-remoteUpgrade golang-binUpgrade golang-docsUpgrade golangUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade criu-libsUpgrade buildah-testsUpgrade libslirp-devel | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade golang-raceUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golang-docs | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade golang-miscUpgrade golang-binUpgrade golang-testsUpgrade golang-raceUpgrade golang-docs | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade podman-dockerUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade toolboxUpgrade golangUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade conmonUpgrade go-toolsetUpgrade podman-testsUpgrade containers-commonUpgrade golang-srcUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade criu-libsUpgrade golang-raceUpgrade slirp4netnsUpgrade python3-podmanUpgrade delve-debuginfoUpgrade libslirpUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade buildah-testsUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade toolbox-debugsourceUpgrade criu-debugsourceUpgrade udicaUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade podmanUpgrade critUpgrade criu-develUpgrade delve-debugsourceUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade golang-testsUpgrade golang-docsUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade runcUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade delveUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade container-selinuxUpgrade podman-catatonitUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade criu-libs-debuginfo | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade podman-pluginsUpgrade delveUpgrade go-toolsetUpgrade container-selinuxUpgrade golang-srcUpgrade containers-commonUpgrade criu-develUpgrade skopeoUpgrade crunUpgrade criu-libsUpgrade conmonUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade python3-criuUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade libslirpUpgrade podman-gvproxyUpgrade golang-testsUpgrade criuUpgrade podman-catatonitUpgrade netavarkUpgrade golang-raceUpgrade golangUpgrade podman-dockerUpgrade golang-miscUpgrade slirp4netnsUpgrade python3-podmanUpgrade aardvark-dnsUpgrade udicaUpgrade podman-testsUpgrade podman-remoteUpgrade golang-binUpgrade critUpgrade buildahUpgrade podmanUpgrade golang-docsUpgrade buildah-testsUpgrade runcUpgrade fuse-overlayfs | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade cri-oUpgrade cri-toolsUpgrade conmonUpgrade skopeoUpgrade podmanUpgrade runcUpgrade openshift-clientsUpgrade microshiftUpgrade openshift | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade netavarkUpgrade skopeoUpgrade criu-develUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade container-selinuxUpgrade libslirp-develUpgrade conmonUpgrade crun-debugsourceUpgrade runcUpgrade delve-debugsourceUpgrade golang-testsUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade podmanUpgrade golang-binUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade golang-raceUpgrade crunUpgrade podman-pluginsUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade golang-docsUpgrade podman-catatonit-debuginfoUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade golang-miscNo solution existsUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirpUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade golangUpgrade libslirp-debuginfoUpgrade podman-testsUpgrade udicaUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade criuUpgrade podman-gvproxyUpgrade go-toolsetUpgrade toolbox-tests | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade golangUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade python3-criuUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade runc-debugsourceUpgrade buildahUpgrade libslirpUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade buildah-tests-debuginfoUpgrade go-toolsetUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade crunUpgrade runc-debuginfoUpgrade criu-develUpgrade delveUpgrade libslirp-develUpgrade criuUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade critUpgrade netavarkUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade golang-binUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonitUpgrade libslirp-debugsource | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.19Upgrade go1.18-opensslUpgrade container-suseconnectUpgrade go1.20-raceUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.20Upgrade go1.18-raceUpgrade go1.19-raceUpgrade go1.18-openssl-docUpgrade go1.18 | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.19Upgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.20-srcUpgrade golang-1.20Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.19-goUpgrade golang-1.18Upgrade golang-1.20-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.19-srcUpgrade golang-1.18-src | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub