Go standard library crypto/tls
13 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-97031 | < 1.26.9 ; 1.27.0-0 – < 1.27.2 | Reject malformed ECH outer extension references in crypto/tls | HIGH 7.5 | 0.5 % | ||
| CVE-2026-56862 | < 1.25.13 ; 1.26.0-0 – < 1.26.6 ; 1.27.0-0 – < 1.27.0-rc.3 | Limit handshake messages we are willing to accept post-handshake in crypto/tls | HIGH 7.5 | 0.6 % | ||
| CVE-2026-42505 | < 1.25.12 ; 1.26.0-0 – < 1.26.5 ; 1.27.0-0 – < 1.27.0-rc.2 | Invoking Encrypted Client Hello privacy leak in crypto/tls | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-32283 | < 1.25.9 ; 1.26.0-0 – < 1.26.2 | Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls | HIGH 7.5 | 0.6 % | ||
| CVE-2025-68121 | < 1.24.13 ; 1.25.0-0 – < 1.25.7 ; 1.26.0-rc.1 – < 1.26.0-rc.3 | Unexpected session resumption in crypto/tls | CRITICAL 10.0 | 0.9 % | ||
| CVE-2025-61730 | < 1.24.12 ; 1.25.0 – < 1.25.6 | Handshake messages may be processed at the incorrect encryption level in crypto/tls | MEDIUM 5.3 | 0.3 % | ||
| CVE-2025-58189 | < 1.24.8 ; 1.25.0 – < 1.25.2 | ALPN negotiation error contains attacker controlled information in crypto/tls | MEDIUM 5.3 | 0.5 % | ||
| CVE-2023-45287 | < 1.20.0 | Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel | HIGH 7.5 | 1.3 % | ||
| CVE-2023-39322 | 1.21.0-0 – < 1.21.1 | Memory exhaustion in QUIC connection handling in crypto/tls | HIGH 7.5 | 1.3 % | ||
| CVE-2023-39321 | 1.21.0-0 – < 1.21.1 | Panic when processing post-handshake message on QUIC connections in crypto/tls | HIGH 7.5 | 1.3 % | ||
| CVE-2023-29409 | < 1.19.12 ; 1.20.0-0 – < 1.20.7 ; 1.21.0-0 – < 1.21.0-rc.4 | Large RSA keys can cause high CPU usage in crypto/tls | MEDIUM 5.3 | 1.6 % | ||
| CVE-2022-41724 | < 1.19.6 ; 1.20.0-0 – < 1.20.1 | Panic on large handshake records in crypto/tls | HIGH 7.5 | 1.1 % | ||
| CVE-2022-30629 | < 1.17.11 ; 1.18.0-0 – < 1.18.3 | Session tickets lack random ticket_age_add in crypto/tls | LOW 3.1 | 1.2 % |