High severity7.5NVD Advisory· Published Feb 28, 2023· Updated Jun 17, 2026

CVE-2022-41724

Description

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

116

Golang/Go5 versions
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*range: <1.19.6
- cpe:2.3:a:golang:go:1.20.0:-:*:*:*:*:*:*
- cpe:2.3:a:golang:go:1.20.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:golang:go:1.20.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:golang:go:1.20.0:rc3:*:*:*:*:*:*
Go/crypto/tlsllm-fuzzy
osv-coords109 versions
pkg:apk/chainguard/falco pkg:apk/chainguard/falco-dev pkg:apk/chainguard/falco-src pkg:apk/chainguard/katib-earlystopping pkg:apk/chainguard/katib-suggestion-hyperband pkg:apk/chainguard/katib-suggestion-hyperopt pkg:apk/chainguard/katib-suggestion-nas-darts pkg:apk/chainguard/katib-suggestion-optuna-enas pkg:apk/chainguard/katib-suggestion-pbt-enas pkg:apk/chainguard/katib-tfevent-metricscollector pkg:apk/wolfi/falco pkg:apk/wolfi/falco-dev pkg:apk/wolfi/falco-src pkg:apk/wolfi/katib-earlystopping pkg:apk/wolfi/katib-suggestion-hyperband pkg:apk/wolfi/katib-suggestion-hyperopt pkg:apk/wolfi/katib-suggestion-nas-darts pkg:apk/wolfi/katib-suggestion-optuna-enas pkg:apk/wolfi/katib-suggestion-pbt-enas pkg:apk/wolfi/katib-tfevent-metricscollector pkg:bitnami/golang pkg:rpm/almalinux/aardvark-dns pkg:rpm/almalinux/buildah pkg:rpm/almalinux/buildah-tests pkg:rpm/almalinux/cockpit-podman pkg:rpm/almalinux/conmon pkg:rpm/almalinux/container-selinux pkg:rpm/almalinux/containernetworking-plugins pkg:rpm/almalinux/containers-common pkg:rpm/almalinux/crit pkg:rpm/almalinux/criu pkg:rpm/almalinux/criu-devel pkg:rpm/almalinux/criu-libs pkg:rpm/almalinux/crun pkg:rpm/almalinux/delve pkg:rpm/almalinux/fuse-overlayfs pkg:rpm/almalinux/go-toolset pkg:rpm/almalinux/golang pkg:rpm/almalinux/golang-bin pkg:rpm/almalinux/golang-docs pkg:rpm/almalinux/golang-misc pkg:rpm/almalinux/golang-race pkg:rpm/almalinux/golang-src pkg:rpm/almalinux/golang-tests pkg:rpm/almalinux/libslirp pkg:rpm/almalinux/libslirp-devel pkg:rpm/almalinux/netavark pkg:rpm/almalinux/oci-seccomp-bpf-hook pkg:rpm/almalinux/podman pkg:rpm/almalinux/podman-catatonit pkg:rpm/almalinux/podman-docker pkg:rpm/almalinux/podman-gvproxy pkg:rpm/almalinux/podman-plugins pkg:rpm/almalinux/podman-remote pkg:rpm/almalinux/podman-tests pkg:rpm/almalinux/python3-criu pkg:rpm/almalinux/python3-podman pkg:rpm/almalinux/runc pkg:rpm/almalinux/skopeo pkg:rpm/almalinux/skopeo-tests pkg:rpm/almalinux/slirp4netns pkg:rpm/almalinux/toolbox pkg:rpm/almalinux/toolbox-tests pkg:rpm/almalinux/udica pkg:rpm/opensuse/go1.18&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/go1.18&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/go1.18-openssl&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/go1.18-openssl&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/go1.19&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/go1.19&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/go1.20&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/go1.20&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/traefik&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/traefik2&distro=openSUSE%20Tumbleweed pkg:rpm/suse/container-suseconnect&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/container-suseconnect&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP4 pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/container-suseconnect&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/go1.18&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/go1.18&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/go1.18-openssl&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/go1.19&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/go1.19&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/go1.19&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/go1.19&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/go1.19&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/go1.19&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/go1.19&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/go1.20&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4
< 0.37.1-r0+ 108 more
- (no CPE)range: < 0.37.1-r0
- (no CPE)range: < 0.37.1-r0
- (no CPE)range: < 0.37.1-r0
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.37.1-r0
- (no CPE)range: < 0.37.1-r0
- (no CPE)range: < 0.37.1-r0
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 0.19.0-r31
- (no CPE)range: < 1.19.6
- (no CPE)range: < 2:1.0.1-38.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 1:1.31.3-1.el9
- (no CPE)range: < 1:1.31.3-1.el9
- (no CPE)range: < 46-1.module_el8.7.0+3344+5bcd850f
- (no CPE)range: < 2:2.1.4-2.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 2:2.205.0-3.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 1:1.3.0-4.el9
- (no CPE)range: < 2:1-38.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 3.15-3.module_el8.6.0+3137+d33c3efb
- (no CPE)range: < 3.15-3.module_el8.6.0+2877+8e437bf5
- (no CPE)range: < 3.15-3.module_el8.6.0+2877+8e437bf5
- (no CPE)range: < 3.15-3.module_el8.6.0+2877+8e437bf5
- (no CPE)range: < 1.8.3-1.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 1.9.1-1.module_el8.8.0+3471+a62632a0
- (no CPE)range: < 1.9-2.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 1.19.6-1.module_el8.8.0+3558+75c9cb88
- (no CPE)range: < 4.4.0-1.module_el8.6.0+2877+8e437bf5
- (no CPE)range: < 4.4.0-1.module_el8.6.0+3137+d33c3efb
- (no CPE)range: < 2:1.0.1-38.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 1.2.5-2.module_el8.8.0+3468+16b86c82
- (no CPE)range: < 2:4.6.1-5.el9
- (no CPE)range: < 2:4.0.2-24.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 2:4.6.1-5.el9
- (no CPE)range: < 2:4.6.1-5.el9
- (no CPE)range: < 2:4.6.1-5.el9
- (no CPE)range: < 2:4.6.1-5.el9
- (no CPE)range: < 2:4.6.1-5.el9
- (no CPE)range: < 3.15-3.module_el8.6.0+3137+d33c3efb
- (no CPE)range: < 4.0.0-2.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 4:1.1.9-1.el9
- (no CPE)range: < 2:1.13.3-1.el9
- (no CPE)range: < 2:1.13.3-1.el9
- (no CPE)range: < 1.1.8-3.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 0.0.99.4-5.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 0.0.99.4-5.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 0.2.6-4.module_el8.9.0+3627+db8ec155
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-1.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.6-1.1
- (no CPE)range: < 1.20.2-150000.1.5.1
- (no CPE)range: < 1.20.1-1.1
- (no CPE)range: < 2.10.1-1.1
- (no CPE)range: < 2.11.5-1.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 2.4.0-150000.4.24.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10-150000.1.46.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.18.10.1-150000.1.9.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.19.7-150000.1.23.1
- (no CPE)range: < 1.20.2-150000.1.5.1
Go standard library/crypto/tlsv5
Range: 0

Patches

Vulnerability mechanics

References

go.dev/cl/468125nvdPatchRelease Notes
go.dev/issue/58001nvdIssue TrackingPatchVendor Advisory
groups.google.com/g/golang-announce/c/V0aBFqaFs_EnvdMailing ListVendor Advisory
pkg.go.dev/vuln/GO-2023-1570nvdVendor Advisory
security.gentoo.org/glsa/202311-09nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000