CVE-2021-34558

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a…

published July 15, 2021

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06975 · 94.1th percentile
Published
2021-07-15T13:47Z
EPSS history
Timeline
  • 15 JUL 13:47Z
    The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a…
    cvelistv5