logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2022-30629

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2022-30629

Description:
Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.
Last updated date:
03/03/2023
Type:
exploit
Confidence:
HIGH
Date of publishing:
08/16/2022
Reference url to background

https://go.dev/issue/52814

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy