Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade podman-catatonitUpgrade conmonUpgrade podman-pluginsUpgrade golang-raceUpgrade slirp4netnsUpgrade libslirpUpgrade podmanUpgrade criu-develUpgrade udicaUpgrade golang-testsUpgrade crunUpgrade netavarkUpgrade podman-testsUpgrade podman-dockerUpgrade python3-podmanUpgrade podman-gvproxyUpgrade toolboxUpgrade delveUpgrade skopeoUpgrade skopeo-testsUpgrade critUpgrade container-selinuxUpgrade golang-miscUpgrade containers-commonUpgrade golang-docsUpgrade golangUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade golang-binUpgrade criu-libsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade podman-remoteUpgrade buildahUpgrade go-toolsetUpgrade runcUpgrade python3-criuUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dns | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade golang-raceUpgrade containerdUpgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade golang-docsUpgrade golang-sharedUpgrade golangUpgrade golang-src | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-race | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade podman-dockerUpgrade runc-debuginfoUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade golang-srcUpgrade podman-gvproxyUpgrade criu-libsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade conmonUpgrade golang-miscUpgrade golang-raceUpgrade libslirpUpgrade buildah-debuginfoUpgrade delve-debuginfoUpgrade containers-commonUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade golangUpgrade podman-testsUpgrade cockpit-podmanUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debugsourceUpgrade container-selinuxUpgrade skopeoUpgrade podman-remoteUpgrade udicaUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade criu-develUpgrade criu-debugsourceUpgrade critUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade runcUpgrade golang-testsUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade delveUpgrade criuUpgrade python3-criuUpgrade delve-debugsourceUpgrade buildahUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade crun | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade buildahUpgrade libslirpUpgrade podman-catatonitUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade netavarkUpgrade podman-dockerUpgrade golang-miscUpgrade udicaUpgrade podman-testsUpgrade podman-gvproxyUpgrade runcUpgrade python3-podmanUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade podmanUpgrade fuse-overlayfsUpgrade critUpgrade buildah-testsUpgrade golangUpgrade podman-remoteUpgrade golang-raceUpgrade criuUpgrade cockpit-podmanUpgrade libslirp-develUpgrade criu-libsUpgrade go-toolsetUpgrade containers-commonUpgrade crunUpgrade conmonUpgrade golang-srcUpgrade skopeo-testsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade podman-pluginsUpgrade delveUpgrade criu-develUpgrade containernetworking-pluginsUpgrade container-selinux | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade cri-oUpgrade cri-toolsUpgrade conmonUpgrade openshiftUpgrade podmanUpgrade runcUpgrade microshiftUpgrade openshift-clientsUpgrade skopeo | May 19, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade buildah-testsUpgrade criuUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade golang-srcUpgrade libslirp-debuginfoUpgrade golang-miscUpgrade golangNo solution existsUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade podman-testsUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade libslirpUpgrade toolbox-debugsourceUpgrade cockpit-podmanUpgrade python3-criuUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade skopeo-debuginfoUpgrade crun-debugsourceUpgrade delveUpgrade skopeoUpgrade podmanUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade delve-debuginfoUpgrade crunUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade podman-pluginsUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade toolboxUpgrade golang-testsUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade delve-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade criu-develUpgrade golang-raceUpgrade critUpgrade netavarkUpgrade container-selinuxUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade runc | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade critUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade delveUpgrade podman-catatonitUpgrade crunUpgrade criu-libsUpgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade podman-pluginsUpgrade conmonUpgrade golang-binUpgrade golang-raceUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade netavarkUpgrade delve-debuginfoUpgrade criu-develUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade crun-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade golangUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade buildah-testsUpgrade libslirpUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade buildahUpgrade buildah-debuginfo | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.19Upgrade go1.18-openssl-raceUpgrade container-suseconnectUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.20Upgrade go1.18-opensslUpgrade go1.20-raceUpgrade go1.18-docUpgrade go1.18Upgrade go1.19-raceUpgrade go1.18-raceUpgrade go1.18-openssl-doc | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.19-srcUpgrade golang-1.18Upgrade golang-1.19-goUpgrade golang-1.20-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.19 | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub