CVE-2021-34558

lowPriorität · verfolgen · 38EPSS 0.070 · 94. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
6.98% (94th) EPSS
CVSS 2.6 · low
Is it mine?
56 products
Prüfe deine Angriffsfläche
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobencontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:3733
  • Behobencontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:3733
  • Behobencontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:3733
  • Behobencontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:3733
  • Behobencontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:3733
  • Behobenstf/service-telemetry-operator-bundle@sha256:3aa38a05aa77bdac184c57f3152b56a9d43447dc086fb8d1388bf50f451d0947_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

    https://access.redhat.com/errata/RHSA-2021:4582
  • Behobenstf/service-telemetry-rhel8-operator@sha256:26aada4cf2ee8427a482d23a26ac735a4141e885e04381e3eea0f417ddb7002a_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

    https://access.redhat.com/errata/RHSA-2021:4582
  • Behobenstf/sg-core-rhel8@sha256:4ab99a587b957ec36ef14738abff0608e8bf14d18c771c6a405fdf003065b1fe_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

    https://access.redhat.com/errata/RHSA-2021:4582
  • Behobenstf/smart-gateway-operator-bundle@sha256:f2105fb56eab3cf34f3012932ac74674743037797c7f0022a46b550d975e2605_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

    https://access.redhat.com/errata/RHSA-2021:4582
  • Behobenstf/smart-gateway-rhel8-operator@sha256:2f3d0901349c9e57c6084d4e5fa1407cd882d6c56163c69b54bbf69bdc919bdc_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog. See References. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

    https://access.redhat.com/errata/RHSA-2021:4582
  • Workaroundcontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundcontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundcontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundcontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundcontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundstf/service-telemetry-operator-bundle@sha256:3aa38a05aa77bdac184c57f3152b56a9d43447dc086fb8d1388bf50f451d0947_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundstf/service-telemetry-rhel8-operator@sha256:26aada4cf2ee8427a482d23a26ac735a4141e885e04381e3eea0f417ddb7002a_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundstf/sg-core-rhel8@sha256:4ab99a587b957ec36ef14738abff0608e8bf14d18c771c6a405fdf003065b1fe_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundstf/smart-gateway-operator-bundle@sha256:f2105fb56eab3cf34f3012932ac74674743037797c7f0022a46b550d975e2605_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundstf/smart-gateway-rhel8-operator@sha256:2f3d0901349c9e57c6084d4e5fa1407cd882d6c56163c69b54bbf69bdc919bdc_amd64 as a component of Service Telemetry Framework 1.3 for RHEL 8redhat_csaf

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 2.6–6.5

v2.02.6lowAV:N/AC:H/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 4.9 · Auswirkung 2.9
v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6
v3.16.5mediumAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.16.2mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Psecondary · CVSS-BT (t0sche)
v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-295USprimärCWE-20USCWE-295US
04

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (56)

Betroffene Produkte und Versionsbereiche.

20 von 56 angezeigt
06

Advisories (7)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2021:3733Red Hat Security Advisory: OpenShift Virtualization 2.6.7 Images security and bug fix update2021-10-06csaf · redhat_csafUS

    Red Hat OpenShift Virtualization release 2.6.7 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2021:4582Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.3.3 - Container Images2021-11-10csaf · redhat_csafUS

    Release of components for the Service Telemetry Framework

  • WID-SEC-W-2022-0966Red Hat OpenShift: Schwachstelle ermöglicht Denial of ServiceDeutsch2021-08-04csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • WID-SEC-W-2022-1335Xerox FreeFlow Print Server: Mehrere SchwachstellenDeutsch2022-09-07csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.

  • WID-SEC-W-2023-2229Splunk Splunk Enterprise: Mehrere SchwachstellenDeutsch2023-08-30csaf · cert_bundDE

    Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern und weitere, nicht spezifizierte Auswirkungen zu verursachen.

  • BIT-golang-2021-345582024-03-06vendor · osvUS

    The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

  • GO-2021-0243Panic on certain certificates in crypto/tls2022-02-17vendor · osvUS

    crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected.

07

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bduosvcert_bundredhat_csafNVDCVE.orgMITRE
veröffentlicht 2021-07-15geändert 2026-06-17
10

Referenzen (120)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan