cve/2022/CVE-2022-30629.md

### [CVE-2022-30629](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30629)
![](https://img.shields.io/static/v1?label=Product&message=crypto%2Ftls&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%201.17.11%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%3A%20Information%20Exposure&color=brighgreen)

### Description

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

### POC

#### Reference
- https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/henriquebesing/container-security
- https://github.com/kb5fls/container-security
- https://github.com/ruzickap/malware-cryptominer-container