CVE-2022-41724 Panic on large handshake records in crypto/tls

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session...

CVE-2022-41724

CVE-2022-41724 describes a vulnerability where large TLS handshake records may cause panics in crypto/tls implementations. Affected are Go TLS clients (including TLS1.3 and TLS1.2 with session resumption) and TLS1.3 servers that request client certificates. Technical cause is panics when construc...

CVE-2022-41724

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session...

CVE-2022-41724 Panic on large handshake records in crypto/tls

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session...

Security fix for the ALT Linux 10 package golang version 1.19.6-alt1

1.19.6-alt1 built Feb. 22, 2023 Alexey Shabalin in task 315371 Feb. 16, 2023 Alexey Shabalin - New version 1.19.6 Fixes: CVE-2022-41725, CVE-2022-41724, CVE-2022-41723, CVE-2022-41722...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co. Ltd (CNVD-2020-41724)

JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...