Lucene search
+L

1 matches found

OSV
OSV
added 2022/08/09 8:17 p.m.24 views

CVE-2022-30629 Session tickets lack random ticket_age_add in crypto/tls

Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption...

3.1CVSS6.7AI score0.00898EPSS
SaveExploits1References8
Rows per page
Query Builder