Total vulnerabilities in the database
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
| Software | From | Fixed in |
|---|---|---|
| golang / go | - | 1.15.14 |
| golang / go | 1.16.0 | 1.16.6 |
| fedoraproject / fedora | 33 | 33.x |
| fedoraproject / fedora | 34 | 34.x |
| oracle / timesten_in-memory_database | - | 21.1.1.1.0 |