Wind River Support Network

HomeDefectsLIN1021-5144
Fixed

LIN1021-5144 : Security Advisory - go - CVE-2022-41724

Created: Jan 29, 2023    Updated: Jun 16, 2023
Resolved Date: May 27, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.18
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).

https://nvd.nist.gov/vuln/detail/CVE-2022-41724

CVEs


Live chat
Online