Skip to content
OpenAdvisories
Low · 3.1 CVE-2022-30629 BIT-golang-2022-30629EUVD-2022-52460GHSA-j55j-52j7-vq87GO-2022-0531

Session tickets lack random ticket_age_add in crypto/tls

Published Aug 9, 2022 · Updated Mar 6, 2026 · Assigned by Go

Description

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

Affected products

VendorProductAffectedFixed
Go standard library crypto/tls < 1.17.11, 1.18.0-0 – < 1.18.3 1.17.11

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 11 golang-1.15 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS golang-1.13 1.13.8-1ubuntu2.22.04.2 USN-6038-2
Ubuntu 22.04 LTS golang-1.17 No fix yet —
Ubuntu 22.04 LTS golang-1.18 1.18.1-1ubuntu1.1 USN-6038-1
Ubuntu 20.04 LTS golang-1.13 1.13.8-1ubuntu1.2 USN-6038-2
Ubuntu 20.04 LTS golang-1.16 1.16.2-0ubuntu1~20.04.1 USN-6038-2
Ubuntu 20.04 LTS golang-1.18 1.18.1-1ubuntu1~20.04.2 USN-6038-1
Ubuntu 18.04 LTS golang-1.18 1.18.1-1ubuntu1~18.04.4 USN-6038-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS golang-1.13 1.13.8-1ubuntu1~18.04.4+esm1 USN-6038-2
Ubuntu Pro 18.04 LTS golang-1.16 1.16.2-0ubuntu1~18.04.2+esm1 USN-6038-2
Ubuntu Pro 16.04 LTS golang-1.13 1.13.8-1ubuntu1~16.04.3+esm3 USN-6038-2
ReleasePackageFixed inAdvisory
RHEL 9 buildah +1 1:1.29.1-1.el9 RHSA-2023:2253
RHEL 9 containernetworking-plugins 1:1.2.0-1.el9 RHSA-2023:2367
RHEL 9 golang +7 1.17.12-1.el9_0 RHSA-2022:5799
RHEL 9 podman +5 2:4.4.1-3.el9 RHSA-2023:2282
RHEL 9 skopeo +1 2:1.11.2-0.1.el9 RHSA-2023:2283
RHEL 8 aardvark-dns 2:1.5.0-2.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 buildah +1 1:1.29.1-1.module+el8.8.0+18195+471da4bb RHSA-2023:2758
RHEL 8 cockpit-podman 63.1-1.module+el8.8.0+18286+cd236dce RHSA-2023:2758
RHEL 8 conmon 3:2.1.6-1.module+el8.8.0+18098+9b44df5f RHSA-2023:2758
RHEL 8 container-selinux 2:2.205.0-2.module+el8.8.0+18438+15d3aa65 RHSA-2023:2758
RHEL 8 containernetworking-plugins 1:1.2.0-1.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 containers-common 2:1-63.module+el8.8.0+18438+15d3aa65 RHSA-2023:2758
RHEL 8 crit +4 3.15-3.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 crun 1.8.1-2.module+el8.8.0+18418+f0e540fe RHSA-2023:2758
RHEL 8 delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2022:5775
RHEL 8 fuse-overlayfs 1.10-1.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 golang +7 1.17.12-1.module+el8.6.0+16014+a372c00b RHSA-2022:5775
RHEL 8 libslirp +1 4.4.0-1.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 netavark 2:1.5.0-4.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 oci-seccomp-bpf-hook 1.2.8-1.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 podman +6 3:4.4.1-8.module+el8.8.0+18438+15d3aa65 RHSA-2023:2758
RHEL 8 python-podman +1 4.4.1-1.module+el8.8.0+18275+3a56cc62 RHSA-2023:2758
RHEL 8 runc 1:1.1.4-1.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 skopeo +1 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c RHSA-2023:2758
RHEL 8 slirp4netns 1.2.0-2.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
RHEL 8 toolbox +1 0.0.99.3-7.module+el8.8.0+18119+e3deee03 RHSA-2023:2758
RHEL 8 udica 0.2.6-20.module+el8.8.0+18060+3f21f2cc RHSA-2023:2758
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Service Mesh 2 servicemesh +7 2.1.5-1.el8 RHSA-2022:6277
Red Hat Service Mesh 2 servicemesh-prometheus 2.23.0-9.el8 RHSA-2022:6277
Red Hat Serverless 1 openshift-serverless-clients 1.3.1-4.el8 RHSA-2022:6042
Red Hat OpenStack 16 etcd 3.3.23-12.el8ost RHSA-2023:1275
Red Hat OpenShift 4 buildah +1 1:1.23.4-3.rhaos4.11.el8 RHSA-2023:3914
Red Hat OpenShift 4 butane +1 0.15.0-2.rhaos4.11.el8 RHSA-2022:6102
Red Hat OpenShift 4 cri-o 1.24.2-4.rhaos4.11.gitd6283df.el8 RHSA-2022:6102
Red Hat OpenShift 4 cri-tools 1.24.2-6.el8 RHSA-2022:6535
Red Hat OpenShift 4 ignition +1 2.14.0-4.rhaos4.11.el8 RHSA-2022:6102
Red Hat OpenShift 4 openshift +1 4.11.0-202306260054.p0.g990d55b.assembly.stream.el8 RHSA-2023:3914
Red Hat OpenShift 4 openshift-ansible +1 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8 RHSA-2023:3914
Red Hat OpenShift 4 podman +5 2:4.0.2-7.rhaos4.11.el8 RHSA-2023:3914
Red Hat OpenShift 4 runc 3:1.1.2-2.rhaos4.11.el8 RHSA-2023:3914
Red Hat OpenShift 4 skopeo +1 2:1.5.2-4.rhaos4.11.el8 RHSA-2023:3914
Red Hat Devtools 2022 go-toolset-1.17 +10 1.17.12-1.el7_9 RHSA-2022:5866
Red Hat Container Native Virtualization 4 kubevirt +2 4.12.0-1057.el7 RHSA-2023:0407

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 buildah +1 1:1.29.1-1.el9 ALSA-2023:2253
AlmaLinux 9 containernetworking-plugins 1:1.2.0-1.el9 ALSA-2023:2367
AlmaLinux 9 podman +5 2:4.4.1-3.el9 ALSA-2023:2282
AlmaLinux 9 skopeo +1 2:1.11.2-0.1.el9 ALSA-2023:2283
AlmaLinux 8 aardvark-dns 2:1.5.0-2.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 buildah +1 1:1.29.1-1.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 cockpit-podman 63.1-1.module_el8.8.0+3557+7ba9cc13 ALSA-2023:2758
AlmaLinux 8 conmon 3:2.1.6-1.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 container-selinux 2:2.205.0-2.module_el8.8.0+3557+7ba9cc13 ALSA-2023:2758
AlmaLinux 8 containernetworking-plugins 1:1.2.0-1.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 containers-common 2:1-63.module_el8.8.0+3568+e8578284 ALSA-2023:2758
AlmaLinux 8 crit +4 3.15-3.module_el8.7.0+3407+95aa0ca9 ALSA-2023:2758
AlmaLinux 8 crun 1.8.1-2.module_el8.8.0+3568+e8578284 ALSA-2023:2758
AlmaLinux 8 fuse-overlayfs 1.10-1.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 libslirp +1 4.4.0-1.module_el8.7.0+3407+95aa0ca9 ALSA-2023:2758
AlmaLinux 8 netavark 2:1.5.0-4.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.8-1.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 podman +6 3:4.4.1-8.module_el8.8.0+3568+e8578284 ALSA-2023:2758
AlmaLinux 8 python3-podman 4.4.1-1.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 runc 1:1.1.4-1.module_el8.7.0+3407+95aa0ca9 ALSA-2023:2758
AlmaLinux 8 skopeo +1 2:1.11.2-0.2.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 slirp4netns 1.2.0-2.module_el8.7.0+3407+95aa0ca9 ALSA-2023:2758
AlmaLinux 8 toolbox +1 0.0.99.3-7.module_el8.8.0+3470+252b1910 ALSA-2023:2758
AlmaLinux 8 udica 0.2.6-20.module_el8.8.0+3470+252b1910 ALSA-2023:2758

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 golang +1 1.17.12-1.el9_0 RLSA-2022:5799
Rocky Linux 8 criu 3.15-3.module+el8.9.0+1445+07728297 RLSA-2023:2758
Rocky Linux 8 delve 1.7.2-1.module+el8.6.0+824+8e984c20 RLSA-2022:5775
Rocky Linux 8 golang +1 1.17.12-1.module+el8.6.0+993+4fde2340 RLSA-2022:5775
Rocky Linux 8 libslirp 4.4.0-1.module+el8.9.0+1445+07728297 RLSA-2023:2758
ReleasePackageFixed inAdvisory
SLES 15 SP4 go1.17 1.17.11-150000.1.37.1 SUSE-SU-2022:2004-1
SLES 15 SP4 go1.18 1.18.3-150000.1.20.1 SUSE-SU-2022:2005-1
SLES 15 SP4 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
SLES 15 SP3 go1.17 1.17.11-150000.1.37.1 SUSE-SU-2022:2004-1
SLES 15 SP3 go1.18 1.18.3-150000.1.20.1 SUSE-SU-2022:2005-1
SLES 15 SP3 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP3 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
SLE Real Time 15 SP3 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
SLE HPC 15 SP3 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
SUSE Enterprise Storage 7.1 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.17 1.17.11-1.1 openSUSE-SU-2024:12123-1
openSUSE Tumbleweed go1.18 1.18.3-1.1 openSUSE-SU-2024:12124-1
openSUSE Leap 15.5 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
openSUSE Leap 15.4 go1.17 1.17.11-150000.1.37.1 SUSE-SU-2022:2004-1
openSUSE Leap 15.4 go1.18 1.18.3-150000.1.20.1 SUSE-SU-2022:2005-1
openSUSE Leap 15.4 go1.18-openssl 1.18.10.1-150000.1.9.1 SUSE-SU-2023:2312-1
openSUSE Leap 15.3 go1.17 1.17.11-150000.1.37.1 SUSE-SU-2022:2004-1
openSUSE Leap 15.3 go1.18 1.18.3-150000.1.20.1 SUSE-SU-2022:2005-1
ReleasePackageFixed inAdvisory
Alpine v3.16 go 1.18.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +7 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048
Amazon Linux 2023 golang-github-cpuguy83-md2man +2 2.0.2-22.amzn2023.0.2 ALAS2023-2023-047
Amazon Linux 2023 golist 0.10.1-11.amzn2023.0.3 ALAS2023-2023-046
Amazon Linux 2 go-filesystem +3 3.0.15-23.amzn2.0.2 ALAS2-2022-1863
Amazon Linux 2 golang +7 1.18.5-1.amzn2 ALAS2-2022-1846
Amazon Linux 2 golang-github-godbus-dbus-devel 0-0.1.gitcb98efb.amzn2.0.2 ALAS2-2022-1858
Amazon Linux 2 golang-github-gorilla-context-devel 0-0.24.gitb06ed15.amzn2.0.4 ALAS2-2022-1859
Amazon Linux 2 golang-github-gorilla-mux-devel 0-0.16.git136d54f.amzn2.0.2 ALAS2-2022-1860
Amazon Linux 2 golang-github-kr-pty-devel 0-0.19.git98c7b80.amzn2.0.3 ALAS2-2022-1864
Amazon Linux 2 golang-github-syndtr-gocapability-devel 0-0.5.git3454319.amzn2.0.3 ALAS2-2022-1865
Amazon Linux 2 golang-googlecode-net-devel 0-0.12.hg84a4013f96e0.amzn2.0.2 ALAS2-2022-1861
Amazon Linux 2 golang-googlecode-sqlite-devel 0-0.9.hg74691fb6f837.amzn2.0.4 ALAS2-2022-1862
Amazon Linux 2 golist 0.10.1-10.amzn2.0.1 ALAS2-2022-1847

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) golang 1.18.5-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 buildah +1 1:1.29.1-1.0.1.el9 ELSA-2023-2253
Oracle Linux 9 containernetworking-plugins 1:1.2.0-1.el9 ELSA-2023-2367
Oracle Linux 9 podman +5 2:4.4.1-3.0.1.el9 ELSA-2023-2282
Oracle Linux 9 skopeo +1 2:1.11.2-0.1.el9 ELSA-2023-2283
Oracle Linux 8 aardvark-dns 2:1.5.0-2.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 buildah +1 1:1.29.1-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 cockpit-podman 63.1-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 conmon 3:2.1.6-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 container-selinux 2:2.205.0-2.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 containernetworking-plugins 1:1.2.0-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 containers-common 2:1-63.0.1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 crit +4 3.15-3.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 crun 1.8.1-2.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 delve 1.8.3-1.0.1.module+el8.6.0+20704+139a7dad ELSA-2022-17956
Oracle Linux 8 fuse-overlayfs 1.10-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 go-toolset 1.18.3-1.module+el8.6.0+20704+139a7dad ELSA-2022-17956
Oracle Linux 8 golang +6 1.18.3-1.0.1.module+el8.6.0+20704+139a7dad ELSA-2022-17956
Oracle Linux 8 libslirp +1 4.4.0-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 netavark 2:1.5.0-4.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.8-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 podman +6 3:4.4.1-8.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 python3-podman 4.4.1-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 runc 1:1.1.4-1.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 skopeo +1 2:1.11.2-0.2.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 slirp4netns 1.2.0-2.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758
Oracle Linux 8 udica 0.2.6-20.module+el8.8.0+21045+adcb6a64 ELSA-2023-2758

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.17.11 · >= 1.18.0-0, < 1.18.3 1.17.11, 1.18.3 GO-2022-0531

Advisories 50

References