Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade libslirp-develUpgrade critUpgrade golang-docsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade golang-binUpgrade aardvark-dnsUpgrade podman-dockerUpgrade python3-criuUpgrade slirp4netnsUpgrade delveUpgrade container-selinuxUpgrade criu-develUpgrade git-lfsUpgrade skopeo-testsUpgrade udicaUpgrade runcUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-remoteUpgrade golang-testsUpgrade golangUpgrade gvisor-tap-vsockUpgrade podmanUpgrade golang-miscUpgrade python3-podmanUpgrade golang-srcUpgrade crunUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade podman-pluginsUpgrade buildahUpgrade podman-testsUpgrade conmonUpgrade netavarkUpgrade containers-commonUpgrade criu-libsUpgrade podman-catatonitUpgrade libslirpUpgrade criuUpgrade fuse-overlayfsUpgrade toolbox-tests | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-misc | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade golang-testsUpgrade podman-testsUpgrade buildahUpgrade golang-binUpgrade python3-podmanUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade gvisor-tap-vsockUpgrade runcUpgrade golangUpgrade podman-dockerUpgrade cockpit-podmanUpgrade golang-docsUpgrade podmanUpgrade criuUpgrade libslirpUpgrade critUpgrade netavarkUpgrade golang-miscUpgrade udicaUpgrade podman-catatonitUpgrade buildah-testsUpgrade conmonUpgrade skopeoUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade criu-libsUpgrade git-lfsUpgrade containers-commonUpgrade go-toolsetUpgrade crunUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade libslirp-develUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-remoteUpgrade golang-srcUpgrade podman-pluginsUpgrade aardvark-dnsUpgrade podman-gvproxy | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade cri-oUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade golang-github-prometheus-promuUpgrade podmanUpgrade openshiftUpgrade runc | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade gvisor-tap-vsockUpgrade delveUpgrade golangUpgrade buildah-tests-debuginfoUpgrade crunUpgrade git-lfsUpgrade buildah-testsUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade golang-miscUpgrade podman-dockerUpgrade podman-debugsourceUpgrade python3-podmanUpgrade crun-debuginfoUpgrade go-toolsetUpgrade buildahUpgrade runc-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade delve-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade conmon-debuginfoUpgrade golang-srcUpgrade container-selinuxUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade libslirpUpgrade criu-develUpgrade skopeo-debugsourceUpgrade podmanUpgrade rhc-worker-scriptUpgrade delve-debugsourceUpgrade toolboxUpgrade containers-commonUpgrade critUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoNo solution existsUpgrade gvisor-tap-vsock-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade netavarkUpgrade udicaUpgrade libslirp-debugsourceUpgrade runcUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade toolbox-testsUpgrade podman-pluginsUpgrade golang-docsUpgrade golang-binUpgrade gvisor-tap-vsock-debuginfoUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade skopeoUpgrade podman-remoteUpgrade git-lfs-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade toolboxUpgrade golangUpgrade golang-binUpgrade delve-debugsourceUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade git-lfsUpgrade delve-debuginfoUpgrade podman-debuginfoUpgrade git-lfs-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade aardvark-dnsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeoUpgrade netavarkUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podmanUpgrade skopeo-testsUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade go-toolsetUpgrade git-lfs-debugsourceUpgrade libslirp-debugsourceUpgrade libslirpUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade toolbox-debuginfoUpgrade slirp4netnsUpgrade podman-testsUpgrade criuUpgrade buildah-debuginfoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade toolbox-testsUpgrade conmonUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade slirp4netns-debuginfo | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-openssl-raceUpgrade go1.21Upgrade go1.22-docUpgrade go1.22-openssl-raceUpgrade go1.21-docUpgrade go1.21-openssl-docUpgrade go1.22Upgrade go1.22-raceUpgrade go1.21-opensslUpgrade go1.21-raceUpgrade go1.22-openssl-docUpgrade go1.22-openssl | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-srcUpgrade golang-1.17-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.21Upgrade golang-1.21-goUpgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.18-goUpgrade golang-1.22Upgrade golang-1.18-srcUpgrade golang-1.22-goUpgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro) | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub