Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade golang-raceUpgrade skopeoUpgrade criuUpgrade skopeo-testsUpgrade criu-develUpgrade delveUpgrade python3-podmanUpgrade crunUpgrade podman-catatonitUpgrade golang-testsUpgrade conmonUpgrade podmanUpgrade libslirpUpgrade podman-testsUpgrade podman-pluginsUpgrade slirp4netnsUpgrade podman-dockerUpgrade udicaUpgrade podman-gvproxyUpgrade netavarkUpgrade container-selinuxUpgrade criu-libsUpgrade go-toolsetUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade buildah-testsUpgrade golangUpgrade containernetworking-pluginsUpgrade critUpgrade golang-docsUpgrade runcUpgrade golang-binUpgrade podman-remoteUpgrade containers-commonUpgrade golang-srcUpgrade golang-miscUpgrade fuse-overlayfsUpgrade buildahUpgrade libslirp-develUpgrade cockpit-podmanUpgrade python3-criuUpgrade oci-seccomp-bpf-hook | May 23, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade golang-miscUpgrade golang-binUpgrade golang-raceUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade containerd | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-raceUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-shared | Feb 17, 2025 | Feb 15, 2023 |
| Centos_linux | — | Upgrade podman-dockerUpgrade fuse-overlayfs-debugsourceUpgrade python3-podmanUpgrade toolboxUpgrade libslirpUpgrade golang-raceUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade golangUpgrade skopeo-debuginfoUpgrade golang-srcUpgrade libslirp-develUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade criu-libsUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade golang-miscUpgrade conmonUpgrade containers-commonUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade buildah-debuginfoUpgrade netavarkUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade udicaUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade criu-develUpgrade criu-debugsourceUpgrade critUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade container-selinuxUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade fuse-overlayfsUpgrade delve-debugsourceUpgrade crunUpgrade toolbox-testsUpgrade delveUpgrade criuUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade runcUpgrade libslirp-debugsourceUpgrade golang-testsUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade skopeo-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade python3-criu | May 17, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 18, 2025 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade golangUpgrade golang-raceUpgrade podmanUpgrade udicaUpgrade fuse-overlayfsUpgrade podman-testsUpgrade cockpit-podmanUpgrade golang-miscUpgrade podman-remoteUpgrade criuUpgrade podman-catatonitUpgrade buildahUpgrade netavarkUpgrade critUpgrade aardvark-dnsUpgrade python3-podmanUpgrade libslirpUpgrade golang-binUpgrade golang-testsUpgrade runcUpgrade buildah-testsUpgrade slirp4netnsUpgrade golang-docsUpgrade podman-gvproxyUpgrade crunUpgrade golang-srcUpgrade criu-develUpgrade libslirp-develUpgrade containers-commonUpgrade python3-criuUpgrade criu-libsUpgrade conmonUpgrade skopeoUpgrade go-toolsetUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade podman-pluginsUpgrade delveUpgrade oci-seccomp-bpf-hook | May 25, 2023 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade skopeoUpgrade conmonUpgrade openshiftUpgrade runcUpgrade openshift-clientsUpgrade podmanUpgrade microshiftUpgrade cri-oUpgrade cri-tools | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade conmonUpgrade skopeo-testsUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade containers-commonUpgrade podman-debugsourceUpgrade runcUpgrade libslirp-debugsourceUpgrade skopeoUpgrade delveUpgrade crun-debugsourceUpgrade criu-develUpgrade podmanUpgrade golang-docsUpgrade golang-raceUpgrade libslirp-develUpgrade toolboxUpgrade netavarkUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade criu-libsUpgrade critUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade podman-debuginfoUpgrade podman-remoteUpgrade golang-binUpgrade delve-debuginfoUpgrade toolbox-debuginfoUpgrade golang-testsUpgrade conmon-debuginfoUpgrade golang-miscUpgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade criuUpgrade podman-testsUpgrade udicaUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade golang-srcUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade libslirp-debuginfoUpgrade golangUpgrade go-toolsetUpgrade buildah-testsUpgrade buildahUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-debuginfoNo solution exists | May 17, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade golang-raceUpgrade runcUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade netavarkUpgrade runc-debuginfoUpgrade containers-commonUpgrade delveUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade delve-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade conmonUpgrade delve-debuginfoUpgrade critUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade criu-libsUpgrade golang-binUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade podman-testsUpgrade podman-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade python3-criuUpgrade golangUpgrade libslirpUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade buildah | Mar 5, 2024 | Feb 28, 2023 |
| Suse | — | Upgrade go1.18Upgrade go1.19-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-opensslUpgrade go1.20-raceUpgrade go1.20-docUpgrade container-suseconnectUpgrade go1.18-docUpgrade go1.19-docUpgrade go1.18-openssl-raceUpgrade go1.20Upgrade go1.19 | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.19-srcUpgrade golang-1.19-goUpgrade golang-1.18Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.17-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.20Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.17-go | Jun 7, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub