Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade buildahUpgrade critUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade podman-remoteUpgrade cockpit-podmanUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade runcUpgrade golang-miscUpgrade buildah-testsUpgrade go-toolsetUpgrade containers-commonUpgrade libslirp-develUpgrade golang-docsUpgrade criu-libsUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade criuUpgrade conmonUpgrade slirp4netnsUpgrade udicaUpgrade toolboxUpgrade criu-develUpgrade python3-podmanUpgrade crunUpgrade podmanUpgrade delveUpgrade netavarkUpgrade libslirpUpgrade golang-testsUpgrade skopeoUpgrade podman-dockerUpgrade skopeo-testsUpgrade golang-raceUpgrade podman-testsUpgrade podman-catatonit | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golang-testsUpgrade golang-sharedUpgrade golangUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-raceUpgrade containerd | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golang-sharedUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-race | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade buildah-debugsourceUpgrade golang-docsUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade aardvark-dnsUpgrade golang-testsUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-testsUpgrade podmanUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade crunUpgrade podman-remoteUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade criuUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade criu-develUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade udicaUpgrade crun-debugsourceUpgrade container-selinuxUpgrade criu-debugsourceUpgrade critUpgrade podman-testsUpgrade podman-pluginsUpgrade golang-raceUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade skopeo-debuginfoUpgrade golangUpgrade containers-commonUpgrade buildah-debuginfoUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade go-toolsetUpgrade conmonUpgrade criu-libsUpgrade libslirpUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade python3-podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade golang-srcUpgrade libslirp-develUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade golangUpgrade aardvark-dnsUpgrade golang-raceUpgrade buildahUpgrade podmanUpgrade podman-dockerUpgrade critUpgrade golang-binUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade golang-docsUpgrade golang-miscUpgrade podman-remoteUpgrade buildah-testsUpgrade cockpit-podmanUpgrade criuUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade libslirpUpgrade netavarkUpgrade podman-catatonitUpgrade podman-testsUpgrade runcUpgrade udicaUpgrade golang-testsUpgrade skopeo-testsUpgrade go-toolsetUpgrade containers-commonUpgrade container-selinuxUpgrade delveUpgrade criu-libsUpgrade conmonUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade crunUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade criu-develUpgrade python3-criuUpgrade libslirp-devel | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade cri-oUpgrade cri-toolsUpgrade podmanUpgrade skopeoUpgrade runcUpgrade microshiftUpgrade openshiftUpgrade conmonUpgrade openshift-clients | May 19, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade crunUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-docsUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade runcUpgrade golang-raceUpgrade golang-binUpgrade python3-podmanUpgrade libslirp-debugsourceUpgrade netavarkUpgrade skopeoUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade delveUpgrade podman-debugsourceUpgrade podmanUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade critUpgrade golang-testsUpgrade podman-pluginsUpgrade toolboxUpgrade golang-srcUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade podman-dockerUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade golangNo solution existsUpgrade podman-testsUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade python3-criuUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade udicaUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade runc-debugsource | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade crun-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade go-toolsetUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade golangUpgrade libslirpUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade golang-binUpgrade criu-libsUpgrade buildah-debugsourceUpgrade golang-raceUpgrade conmonUpgrade critUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade criuUpgrade containers-commonUpgrade runc-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade crun-debugsourceUpgrade crunUpgrade netavarkUpgrade delveUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfo | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.18-raceUpgrade go1.18Upgrade go1.18-openssl-docUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.20-raceUpgrade go1.18-opensslUpgrade go1.18-docUpgrade container-suseconnectUpgrade go1.18-openssl-raceUpgrade go1.20Upgrade go1.19 | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.19-srcUpgrade golang-1.18Upgrade golang-1.19-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.17Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.20Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17-go | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub