Lucene search
HistoryAug 10, 2022 - 8:15 p.m.
CVE-2022-30629
non-random values
session tickets
crypto/tls
go 1.17.11
go 1.18.3
tls handshakes
session resumption
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
49.9%
Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.
Affected configurations
Node
golanggoRange<1.17.11
ORgolanggoRange1.18.0–1.18.3
Related
ibm
ibm
nessus
nessus
RHEL 9 : ior (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : OpenShift Container Platform 4.11.1 (RHSA-2022:6102)
2022-09-08 00:00:00
CentOS 9 : podman-4.3.0-2.el9
2024-02-29 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2022-06-17 00:05:59
osv
osv
Session tickets lack random ticket_age_add in crypto/tls
2022-07-28 17:24:57
CVE-2022-30629
2022-08-10 20:15:40
BIT-golang-2022-30629
2024-03-06 11:00:22
cve
cve
CVE-2022-30629
2022-08-10 20:15:40
veracode
veracode
Insecure Session
2022-07-25 13:44:55
debiancve
debiancve
CVE-2022-30629
2022-08-10 20:15:40
redhat
redhat
cbl_mariner
cbl_mariner
CVE-2022-30629 affecting package golang for versions less than 1.18.5-1
2022-09-16 06:05:39
CVE-2022-30629 affecting package golang 1.18.3-1
2022-09-17 05:56:44
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0231)
2022-06-17 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2439)
2022-10-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2004-1)
2022-06-08 00:00:00
redhatcve
redhatcve
CVE-2022-30629
2022-06-07 02:29:59
ubuntucve
ubuntucve
CVE-2022-30629
2022-08-10 00:00:00
cvelist
cvelist
CVE-2022-30629 Session tickets lack random ticket_age_add in crypto/tls
2022-08-09 20:17:31
alpinelinux
alpinelinux
CVE-2022-30629
2022-08-10 20:15:40
prion
prion
Session fixation
2022-08-10 20:15:00
almalinux
almalinux
Moderate: podman security and bug fix update
2023-05-09 00:00:00
Moderate: containernetworking-plugins security and bug fix update
2023-05-09 00:00:00
Moderate: skopeo security and bug fix update
2023-05-09 00:00:00
oraclelinux
oraclelinux
buildah security and bug fix update
2023-05-15 00:00:00
skopeo security and bug fix update
2023-05-15 00:00:00
containernetworking-plugins security and bug fix update
2023-05-15 00:00:00
redos
redos
ROS-20240327-01
2024-03-27 00:00:00
suse
suse
Security update for go1.18 (important)
2022-06-07 00:00:00
Security update for go1.17 (important)
2022-06-07 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-06-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.3-alt1
2022-06-12 00:00:00
Security fix for the ALT Linux 10 package golang version 1.17.11-alt1.p10
2022-06-14 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: deepin-api-5.4.11-4.fc35
2022-07-20 01:40:13
[SECURITY] Fedora 36 Update: nex-20210330-4.fc36
2022-07-31 01:37:18
[SECURITY] Fedora 36 Update: golang-1.18.3-2.fc36
2022-07-13 02:00:09
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
49.9%
Related for NVD:CVE-2022-30629