cve/2022/CVE-2022-30629.md

CVE-2022-30629

Description

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

POC

Reference

• https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/henriquebesing/container-security
• https://github.com/kb5fls/container-security
• https://github.com/ruzickap/malware-cryptominer-container