CVE-2022-41724

Upstream information

CVE-2022-41724 at MITRE

Description

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	7.5	7.5
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector	Network	Network
Attack Complexity	Low	Low
Privileges Required	None	None
User Interaction	None	None
Scope	Unchanged	Unchanged
Confidentiality Impact	None	None
Integrity Impact	None	None
Availability Impact	High	High
CVSSv3 Version	3.1	3.1

Note from the SUSE Security Team on the go1.* package

SUSE only supports the current and the previous GO language releases.

SUSE Bugzilla entry: 1208271 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-CU-2023:1897-1, published Wed Jun 14 07:26:47 UTC 2023
• SUSE-CU-2023:2729-1, published Sun Aug 20 07:06:14 UTC 2023
• SUSE-CU-2023:674-1, published Thu Mar 16 08:03:34 UTC 2023
• SUSE-CU-2023:768-1, published Wed Mar 22 12:55:19 UTC 2023
• SUSE-CU-2023:776-1, published Thu Mar 23 08:04:58 UTC 2023
• SUSE-CU-2023:785-1, published Sat Mar 25 08:04:06 UTC 2023
• SUSE-CU-2023:789-1, published Sat Mar 25 08:05:49 UTC 2023
• SUSE-CU-2023:802-1, published Tue Mar 28 07:05:11 UTC 2023
• SUSE-SU-2023:0733-1, published Tue Mar 14 20:30:17 UTC 2023
• SUSE-SU-2023:0735-1, published Tue Mar 14 20:30:10 UTC 2023
• SUSE-SU-2023:0869-1, published Wed Mar 22 12:30:09 UTC 2023
• SUSE-SU-2023:0871-1, published Wed Mar 22 16:30:09 UTC 2023
• SUSE-SU-2023:2312-1, published Tue May 30 08:30:10 UTC 2023

List of released packages

Product(s)	Fixed package version(s)	References
Container bci/golang:1.18-20.6	go1.18 >= 1.18.10-150000.1.46.1
Container bci/golang:1.20-2.2	go1.20 >= 1.20.2-150000.1.5.1
Container bci/golang:oldstable-3.4	go1.19 >= 1.19.7-150000.1.23.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container suse/ltss/sle15.3/sle15:15.3.3.23 Container suse/ltss/sle15.4/sle15:15.4.2.2 Container suse/sle-micro/5.1/toolbox:13.2-3.8.1 Container suse/sle-micro/5.2/toolbox:13.2-7.8.1 Container suse/sle-micro/5.3/toolbox:13.2-6.8.1 Container suse/sle-micro/5.4/toolbox:13.2-5.15.1 Container suse/sle15:15.1.6.2.748 Container suse/sle15:15.2.9.5.277 Container suse/sle15:15.3.17.20.115 Container suse/sle15:15.4.27.14.42 Container suse/sle15:15.5.36.5.4 Container suse/sle15:15.6.45.31	container-suseconnect >= 2.4.0-150000.4.24.1
SUSE CaaS Platform 4.0	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SUSE-CAASP-4.0-2023-871
SUSE Enterprise Storage 7.1	container-suseconnect >= 2.4.0-150000.4.24.1 go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1	Patchnames: SUSE-Storage-7.1-2023-2312 SUSE-Storage-7.1-2023-733 SUSE-Storage-7.1-2023-869 SUSE-Storage-7.1-2023-871
SUSE Enterprise Storage 7	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-Storage-7-2023-871
SUSE Liberty Linux 8	delve >= 1.9.1-1.module+el8.8.0+16778+5fbb74f5 go-toolset >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang-bin >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang-docs >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang-misc >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang-race >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang-src >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6 golang-tests >= 1.19.6-1.module+el8.8.0+18289+edd6c8b6	Patchnames: RHSA-2023:3083
SUSE Liberty Linux 9	buildah >= 1.31.3-1.el9 buildah-tests >= 1.31.3-1.el9 containernetworking-plugins >= 1.3.0-4.el9 podman >= 4.6.1-5.el9 podman-docker >= 4.6.1-5.el9 podman-gvproxy >= 4.6.1-5.el9 podman-plugins >= 4.6.1-5.el9 podman-remote >= 4.6.1-5.el9 podman-tests >= 4.6.1-5.el9 runc >= 1.1.9-1.el9 skopeo >= 1.13.3-1.el9 skopeo-tests >= 1.13.3-1.el9	Patchnames: RHSA-2023:6363 RHSA-2023:6380 RHSA-2023:6402 RHSA-2023:6473 RHSA-2023:6474
SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4	go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1 go1.20 >= 1.20.2-150000.1.5.1 go1.20-doc >= 1.20.2-150000.1.5.1 go1.20-race >= 1.20.2-150000.1.5.1	Patchnames: SUSE-SLE-Module-Development-Tools-15-SP4-2023-2312 SUSE-SLE-Module-Development-Tools-15-SP4-2023-733 SUSE-SLE-Module-Development-Tools-15-SP4-2023-735 SUSE-SLE-Module-Development-Tools-15-SP4-2023-869
SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5	go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1 go1.20 >= 1.20.2-150000.1.5.1 go1.20-doc >= 1.20.2-150000.1.5.1 go1.20-race >= 1.20.2-150000.1.5.1	Patchnames: SUSE Linux Enterprise Module for Development Tools 15 SP5 GA go1.19-1.19.9-150000.1.31.1 SUSE Linux Enterprise Module for Development Tools 15 SP5 GA go1.20-1.20.4-150000.1.11.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-871
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-871
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	container-suseconnect >= 2.4.0-150000.4.24.1 go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1	Patchnames: SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2312 SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-733 SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-869 SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-871
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	container-suseconnect >= 2.4.0-150000.4.24.1 go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1	Patchnames: SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2312 SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-733 SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-869 SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-871
SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3	container-suseconnect >= 2.4.0-150000.4.24.1 go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1 go1.20 >= 1.20.2-150000.1.5.1 go1.20-doc >= 1.20.2-150000.1.5.1 go1.20-race >= 1.20.2-150000.1.5.1	Patchnames: SUSE-SLE-Module-Containers-15-SP4-2023-871 SUSE-SLE-Module-Development-Tools-15-SP4-2023-2312 SUSE-SLE-Module-Development-Tools-15-SP4-2023-733 SUSE-SLE-Module-Development-Tools-15-SP4-2023-735 SUSE-SLE-Module-Development-Tools-15-SP4-2023-869
SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5	container-suseconnect >= 2.4.0-150000.4.24.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1 go1.20 >= 1.20.2-150000.1.5.1 go1.20-doc >= 1.20.2-150000.1.5.1 go1.20-race >= 1.20.2-150000.1.5.1	Patchnames: SUSE Linux Enterprise Module for Containers 15 SP5 GA container-suseconnect-2.4.0-150000.4.28.1 SUSE Linux Enterprise Module for Development Tools 15 SP5 GA go1.19-1.19.9-150000.1.31.1 SUSE Linux Enterprise Module for Development Tools 15 SP5 GA go1.20-1.20.4-150000.1.11.1
SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Containers 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE Linux Enterprise Module for Containers 15 SP6 GA container-suseconnect-2.4.0-150000.4.50.2
SUSE Linux Enterprise Module for Containers 15 SP4	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Module-Containers-15-SP4-2023-871
SUSE Linux Enterprise Module for Containers 15 SP5	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE Linux Enterprise Module for Containers 15 SP5 GA container-suseconnect-2.4.0-150000.4.28.1
SUSE Linux Enterprise Real Time 15 SP3	go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1	Patchnames: SUSE-SLE-Product-RT-15-SP3-2023-2312 SUSE-SLE-Product-RT-15-SP3-2023-733 SUSE-SLE-Product-RT-15-SP3-2023-869
SUSE Linux Enterprise Server 15 SP1-LTSS	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-871
SUSE Linux Enterprise Server 15 SP2-LTSS	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-871
SUSE Linux Enterprise Server 15 SP3-LTSS	container-suseconnect >= 2.4.0-150000.4.24.1 go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1	Patchnames: SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2312 SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-733 SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-869 SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-871
SUSE Linux Enterprise Server for SAP Applications 15 SP1	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP1-2023-871
SUSE Linux Enterprise Server for SAP Applications 15 SP2	container-suseconnect >= 2.4.0-150000.4.24.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP2-2023-871
SUSE Linux Enterprise Server for SAP Applications 15 SP3	container-suseconnect >= 2.4.0-150000.4.24.1 go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2312 SUSE-SLE-Product-SLES_SAP-15-SP3-2023-733 SUSE-SLE-Product-SLES_SAP-15-SP3-2023-869 SUSE-SLE-Product-SLES_SAP-15-SP3-2023-871
openSUSE Leap 15.4	go1.18 >= 1.18.10-150000.1.46.1 go1.18-doc >= 1.18.10-150000.1.46.1 go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1 go1.18-race >= 1.18.10-150000.1.46.1 go1.19 >= 1.19.7-150000.1.23.1 go1.19-doc >= 1.19.7-150000.1.23.1 go1.19-race >= 1.19.7-150000.1.23.1 go1.20 >= 1.20.2-150000.1.5.1 go1.20-doc >= 1.20.2-150000.1.5.1 go1.20-race >= 1.20.2-150000.1.5.1	Patchnames: openSUSE-SLE-15.4-2023-2312 openSUSE-SLE-15.4-2023-733 openSUSE-SLE-15.4-2023-735 openSUSE-SLE-15.4-2023-869
openSUSE Leap 15.5	go1.18-openssl >= 1.18.10.1-150000.1.9.1 go1.18-openssl-doc >= 1.18.10.1-150000.1.9.1 go1.18-openssl-race >= 1.18.10.1-150000.1.9.1	Patchnames: openSUSE-SLE-15.5-2023-2312
openSUSE Tumbleweed	go1.18 >= 1.18.10-1.1 go1.18-doc >= 1.18.10-1.1 go1.18-race >= 1.18.10-1.1 go1.19 >= 1.19.6-1.1 go1.19-doc >= 1.19.6-1.1 go1.19-race >= 1.19.6-1.1 go1.20 >= 1.20.1-1.1 go1.20-doc >= 1.20.1-1.1 go1.20-race >= 1.20.1-1.1 traefik >= 2.10.1-1.1 traefik2 >= 2.11.5-1.1	Patchnames: openSUSE-Tumbleweed-2024-12707 openSUSE-Tumbleweed-2024-12708 openSUSE-Tumbleweed-2024-12798 openSUSE-Tumbleweed-2024-13007 openSUSE-Tumbleweed-2024-14076

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SUSE Enterprise Storage 7.1	container-suseconnect	Released
SUSE Enterprise Storage 7.1	go1.18	Released
SUSE Enterprise Storage 7.1	go1.18-openssl	Released
SUSE Enterprise Storage 7.1	go1.19	Released
SUSE Linux Enterprise Desktop 15 SP5	go1.19	Released
SUSE Linux Enterprise Desktop 15 SP5	go1.20	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	container-suseconnect	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	go1.19	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	go1.20	Released
SUSE Linux Enterprise High Performance Computing 15 SP6	container-suseconnect	Released
SUSE Linux Enterprise Module for Containers 15 SP5	container-suseconnect	Released
SUSE Linux Enterprise Module for Containers 15 SP6	container-suseconnect	Released
SUSE Linux Enterprise Module for Development Tools 15 SP5	go1.19	Released
SUSE Linux Enterprise Module for Development Tools 15 SP5	go1.20	Released
SUSE Linux Enterprise Server 12 SP5	go1.20	Affected
SUSE Linux Enterprise Server 15 SP5	container-suseconnect	Released
SUSE Linux Enterprise Server 15 SP5	go1.19	Released
SUSE Linux Enterprise Server 15 SP5	go1.20	Released
SUSE Linux Enterprise Server 15 SP6	container-suseconnect	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP5	go1.20	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	container-suseconnect	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	go1.19	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	go1.20	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6	container-suseconnect	Released
SUSE Linux Enterprise Software Development Kit 12 SP5	go1.20	Affected
SUSE Manager Proxy 4.3	container-suseconnect	Released
SUSE Manager Proxy 4.3	go1.18	Released
SUSE Manager Proxy 4.3	go1.18-openssl	Released
SUSE Manager Proxy 4.3	go1.19	Released
SUSE Manager Proxy 4.3	go1.20	Released
SUSE Manager Retail Branch Server 4.3	container-suseconnect	Released
SUSE Manager Retail Branch Server 4.3	go1.18	Released
SUSE Manager Retail Branch Server 4.3	go1.18-openssl	Released
SUSE Manager Retail Branch Server 4.3	go1.19	Released
SUSE Manager Retail Branch Server 4.3	go1.20	Released
SUSE Manager Server 4.3	container-suseconnect	Released
SUSE Manager Server 4.3	go1.18	Released
SUSE Manager Server 4.3	go1.18-openssl	Released
SUSE Manager Server 4.3	go1.19	Released
SUSE Manager Server 4.3	go1.20	Released
openSUSE Leap 15.5	go1.18	Affected
openSUSE Leap 15.5	go1.18-openssl	Released
openSUSE Leap 15.5	go1.19	Affected
openSUSE Leap 15.5	go1.20	Affected
openSUSE Leap 15.6	go1.18	Affected
openSUSE Leap 15.6	go1.18-openssl	Affected
openSUSE Leap 15.6	go1.19	Affected
openSUSE Leap 15.6	go1.20	Affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SUSE Linux Enterprise Desktop 15 SP4	go1.18	Released
SUSE Linux Enterprise Desktop 15 SP4	go1.18-openssl	Released
SUSE Linux Enterprise Desktop 15 SP4	go1.19	Released
SUSE Linux Enterprise Desktop 15 SP4	go1.20	Released
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	container-suseconnect	Released
SUSE Linux Enterprise High Performance Computing 15 SP3	go1.18	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	go1.18-openssl	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	go1.19	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	container-suseconnect	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	go1.18	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	go1.18-openssl	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	go1.19	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	container-suseconnect	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	go1.18	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	go1.18-openssl	Released
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	go1.19	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	container-suseconnect	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	go1.18	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	go1.18-openssl	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	go1.19	Released
SUSE Linux Enterprise High Performance Computing 15 SP4	go1.20	Released
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	go1.18	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	go1.18-openssl	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	go1.19	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	go1.20	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	go1.18	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	go1.18-openssl	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	go1.19	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	go1.20	Affected
SUSE Linux Enterprise Module for Containers 15 SP4	container-suseconnect	Released
SUSE Linux Enterprise Module for Development Tools 15 SP3	go1.18	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP3	go1.18-openssl	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP3	go1.19	Affected
SUSE Linux Enterprise Module for Development Tools 15 SP4	go1.18	Released
SUSE Linux Enterprise Module for Development Tools 15 SP4	go1.18-openssl	Released
SUSE Linux Enterprise Module for Development Tools 15 SP4	go1.19	Released
SUSE Linux Enterprise Module for Development Tools 15 SP4	go1.20	Released
SUSE Linux Enterprise Server 15 SP2-LTSS	container-suseconnect	Released
SUSE Linux Enterprise Server 15 SP3	go1.18	Affected
SUSE Linux Enterprise Server 15 SP3	go1.18-openssl	Affected
SUSE Linux Enterprise Server 15 SP3	go1.19	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	container-suseconnect	Released
SUSE Linux Enterprise Server 15 SP3-LTSS	go1.18	Released
SUSE Linux Enterprise Server 15 SP3-LTSS	go1.18-openssl	Released
SUSE Linux Enterprise Server 15 SP3-LTSS	go1.19	Released
SUSE Linux Enterprise Server 15 SP4	container-suseconnect	Released
SUSE Linux Enterprise Server 15 SP4	go1.18	Released
SUSE Linux Enterprise Server 15 SP4	go1.18-openssl	Released
SUSE Linux Enterprise Server 15 SP4	go1.19	Released
SUSE Linux Enterprise Server 15 SP4	go1.20	Released
SUSE Linux Enterprise Server 15 SP4-LTSS	go1.18	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	go1.18-openssl	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	go1.19	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	go1.20	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	container-suseconnect	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	container-suseconnect	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	go1.18	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	go1.18-openssl	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	go1.19	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	container-suseconnect	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	go1.18	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	go1.18-openssl	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	go1.19	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP4	go1.20	Released
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 4.0	container-suseconnect	Released
SUSE Enterprise Storage 7	container-suseconnect	Released
SUSE Linux Enterprise Desktop 15 SP3	go1.18	Affected
SUSE Linux Enterprise Desktop 15 SP3	go1.18-openssl	Affected
SUSE Linux Enterprise Desktop 15 SP3	go1.19	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	container-suseconnect	Released
SUSE Linux Enterprise Real Time 15 SP3	go1.18	Released
SUSE Linux Enterprise Real Time 15 SP3	go1.18-openssl	Released
SUSE Linux Enterprise Real Time 15 SP3	go1.19	Released
SUSE Linux Enterprise Real Time 15 SP3	go1.20	Affected
SUSE Linux Enterprise Real Time 15 SP4	go1.18	Affected
SUSE Linux Enterprise Real Time 15 SP4	go1.18-openssl	Affected
SUSE Linux Enterprise Real Time 15 SP4	go1.19	Affected
SUSE Linux Enterprise Real Time 15 SP4	go1.20	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	container-suseconnect	Released
SUSE Linux Enterprise Server 15 SP3-BCL	go1.18	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	go1.18-openssl	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	go1.19	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	container-suseconnect	Released
SUSE Manager Proxy 4.2	go1.18	Affected
SUSE Manager Proxy 4.2	go1.18-openssl	Affected
SUSE Manager Proxy 4.2	go1.19	Affected
SUSE Manager Retail Branch Server 4.2	go1.18	Affected
SUSE Manager Retail Branch Server 4.2	go1.18-openssl	Affected
SUSE Manager Retail Branch Server 4.2	go1.19	Affected
SUSE Manager Server 4.2	go1.18	Affected
SUSE Manager Server 4.2	go1.18-openssl	Affected
SUSE Manager Server 4.2	go1.19	Affected
openSUSE Leap 15.3	go1.18	Affected
openSUSE Leap 15.3	go1.18-openssl	Affected
openSUSE Leap 15.3	go1.19	Affected
openSUSE Leap 15.4	go1.18	Released
openSUSE Leap 15.4	go1.18-openssl	Released
openSUSE Leap 15.4	go1.19	Released
openSUSE Leap 15.4	go1.20	Released
Container Status
bci/golang:1.18	go1.18	Released
bci/golang	go1.18	In progress
bci/golang:1.19	go1.19	Released
bci/golang	go1.20	Released
Harvester master
rancher/rke2-runtime:v1.27.13-rke2r1	bin/crictl	Affected
rancher/system-agent:v0.3.6-suc	usr/bin/kubectl	Affected
rancher/rancher:v2.8.3	usr/bin/loglevel usr/share/rancher/ui/assets/wins.exe	Affected
Harvester v1.2-head
rancher/rke2-runtime:v1.26.15-rke2r1	bin/crictl	Affected
rancher/rancher:v2.8.2	usr/bin/etcdctl usr/bin/loglevel usr/bin/telemetry usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.4-suc	usr/bin/kubectl	Affected
rancher/harvester-upgrade:v1.2-head	usr/bin/virtctl	Affected
Harvester v1.2.1
rancher/rke2-runtime:v1.25.9-rke2r1	bin/crictl	Affected
rancher/system-upgrade-controller:v0.11.0	bin/system-upgrade-controller	Affected
rancher/shell:v0.1.18	container-suseconnect	Affected
longhornio/csi-attacher:v3.4.0	csi-attacher	Affected
longhornio/csi-node-driver-registrar:v2.5.0	csi-node-driver-registrar	Affected
longhornio/csi-provisioner:v2.1.2	csi-provisioner	Affected
longhornio/csi-resizer:v1.3.0	csi-resizer	Affected
longhornio/csi-snapshotter:v5.0.1	csi-snapshotter	Affected
rancher/nginx-ingress-controller:nginx-1.6.4-hardened4	dbg nginx-ingress-controller wait-shutdown	Affected
longhornio/livenessprobe:v2.8.0	livenessprobe	Affected
longhornio/longhorn-share-manager:v1.4.3	longhorn-share-manager	Affected
rancher/system-agent:v0.3.3-suc	opt/rancher-system-agent-suc/rancher-system-agent usr/bin/kubectl	Affected
rancher/rancher:v2.7.5	usr/bin/etcdctl usr/bin/loglevel usr/bin/telemetry usr/share/rancher/ui/assets/wins.exe	Affected
rancher/harvester-load-balancer-webhook:v0.2.1	usr/bin/harvester-load-balancer-webhook	Affected
rancher/harvester-load-balancer:v0.2.1	usr/bin/harvester-load-balancer	Affected
rancher/harvester-network-controller:v0.3.4	usr/bin/harvester-network-controller	Affected
rancher/harvester-network-helper:v0.3.4	usr/bin/harvester-network-helper	Affected
rancher/harvester-network-webhook:v0.3.4	usr/bin/harvester-network-webhook	Affected
rancher/harvester-webhook:v1.2.1	usr/bin/harvester-webhook	Affected
rancher/harvester:v1.2.1	usr/bin/harvester	Affected
longhornio/support-bundle-kit:v0.0.25 rancher/support-bundle-kit:v0.0.28	usr/bin/support-bundle-kit	Affected
rancher/harvester-upgrade:v1.2.1	usr/bin/virtctl	Affected
rancher/harvester-vm-import-controller:v0.1.5	usr/bin/vm-import-controller	Affected
longhornio/backing-image-manager:v1.4.3	usr/local/bin/backing-image-manager	Affected
longhornio/longhorn-instance-manager:v1.4.3	usr/local/bin/grpc_health_probe usr/local/bin/longhorn-instance-manager	Affected
longhornio/longhorn-engine:v1.4.3	usr/local/bin/grpc_health_probe usr/local/bin/longhorn usr/local/bin/longhorn-instance-manager	Affected
rancher/shell:v0.1.20	usr/local/bin/helm	Affected
rancher/shell:v0.1.8	usr/local/bin/helm usr/local/bin/k9s usr/local/bin/kubectl	Affected
rancher/shell:v0.1.18	usr/local/bin/helm usr/local/bin/k9s usr/local/bin/kubectl usr/local/bin/kustomize	Affected
longhornio/longhorn-manager:v1.4.3	usr/local/sbin/longhorn-manager	Affected
Harvester v1.2.2
rancher/rke2-runtime:v1.26.15-rke2r1	bin/crictl	Affected
rancher/rancher:v2.8.2	usr/bin/etcdctl usr/bin/loglevel usr/bin/telemetry usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.4-suc	usr/bin/kubectl	Affected
rancher/harvester-upgrade:v1.2.2	usr/bin/virtctl	Affected
Harvester v1.3-head
rancher/rke2-runtime:v1.27.13-rke2r1	bin/crictl	Affected
rancher/system-agent:v0.3.6-suc	usr/bin/kubectl	Affected
rancher/rancher:v2.8.3	usr/bin/loglevel usr/share/rancher/ui/assets/wins.exe	Affected
Harvester v1.3.0
rancher/rke2-runtime:v1.27.10-rke2r1	bin/crictl	Affected
rancher/rancher:v2.8.2	usr/bin/etcdctl usr/bin/loglevel usr/bin/telemetry usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.4-suc	usr/bin/kubectl	Affected
Harvester v1.3.1
rancher/rke2-runtime:v1.27.13-rke2r1	bin/crictl	Affected
rancher/system-agent:v0.3.6-suc	usr/bin/kubectl	Affected
rancher/rancher:v2.8.3	usr/bin/loglevel usr/share/rancher/ui/assets/wins.exe	Affected
Longhorn v1.5.3
longhornio/csi-attacher:v4.2.0	csi-attacher	Affected
longhornio/csi-node-driver-registrar:v2.7.0	csi-node-driver-registrar	Affected
longhornio/csi-provisioner:v3.4.1	csi-provisioner	Affected
longhornio/csi-resizer:v1.7.0	csi-resizer	Affected
longhornio/csi-snapshotter:v6.2.1	csi-snapshotter	Affected
longhornio/livenessprobe:v2.9.0	livenessprobe	Affected
longhornio/support-bundle-kit:v0.0.27	usr/bin/support-bundle-kit	Affected
longhornio/longhorn-engine:v1.5.3 longhornio/longhorn-instance-manager:v1.5.3	usr/local/bin/grpc_health_probe	Affected
Longhorn v1.5.4
longhornio/longhorn-instance-manager:v1.5.4	usr/local/bin/grpc_health_probe	Affected
Rancher v2.7-head
rancher/rke2-runtime:v1.23.17-rke2r1	bin/containerd bin/containerd-shim bin/containerd-shim-runc-v1 bin/containerd-shim-runc-v2 bin/crictl bin/ctr bin/runc	Affected
rancher/rke2-runtime:v1.24.17-rke2r1 rancher/rke2-runtime:v1.25.16-rke2r1 rancher/rke2-runtime:v1.26.15-rke2r1 rancher/rke2-runtime:v1.27.14-rke2r1	bin/crictl	Affected
rancher/hardened-kubernetes:v1.23.17-rke2r1-build20230228 rancher/nginx-ingress-controller:nginx-1.2.1-hardened9 rancher/nginx-ingress-controller:nginx-1.4.1-hardened2	container-suseconnect	Affected
rancher/nginx-ingress-controller:nginx-1.2.1-hardened7 rancher/nginx-ingress-controller:nginx-1.2.1-hardened9 rancher/nginx-ingress-controller:nginx-1.4.1-hardened2 rancher/nginx-ingress-controller:nginx-1.5.1-rancher2 rancher/nginx-ingress-controller:nginx-1.6.4-hardened4	dbg nginx-ingress-controller wait-shutdown	Affected
rancher/rke-tools:v0.1.88 rancher/rke-tools:v0.1.90	opt/rke-tools/bin/cri-dockerd opt/rke-tools/rke-etcd-backup tmp/bandwidth tmp/bridge tmp/dhcp tmp/firewall tmp/flannel tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/bin/confd usr/local/bin/kubectl	Affected
rancher/rke-tools:v0.1.96	tmp/bandwidth tmp/bridge tmp/dhcp tmp/dummy tmp/firewall tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/local/bin/etcdctl	Affected
rancher/eks-operator:v1.2.3	usr/bin/eks-operator	Affected
rancher/rancher:v2.7-head	usr/bin/etcdctl usr/bin/loglevel usr/share/rancher/ui/assets/wins.exe	Affected
rancher/system-agent:v0.3.6-suc	usr/bin/kubectl	Affected
rancher/rancher-agent:v2.7-head	usr/bin/loglevel	Affected
rancher/ui-plugin-operator:v0.1.1	usr/bin/ui-plugin-operator	Affected
rancher/hyperkube:v1.23.16-rancher2	usr/local/bin/kube-apiserver usr/local/bin/kube-controller-manager usr/local/bin/kube-proxy usr/local/bin/kube-scheduler usr/local/bin/kubectl usr/local/bin/kubelet	Affected
rancher/rke2-cloud-provider:v0.0.3-build20211118	usr/local/bin/rke2-cloud-provider	Affected
Rancher v2.7.14
rancher/rke2-runtime:v1.23.17-rke2r1	bin/containerd bin/containerd-shim bin/containerd-shim-runc-v1 bin/containerd-shim-runc-v2 bin/crictl bin/ctr bin/runc	Affected
rancher/rke2-runtime:v1.24.17-rke2r1 rancher/rke2-runtime:v1.25.16-rke2r1 rancher/rke2-runtime:v1.26.15-rke2r1 rancher/rke2-runtime:v1.27.14-rke2r1	bin/crictl	Affected
rancher/hardened-kubernetes:v1.23.17-rke2r1-build20230228 rancher/nginx-ingress-controller:nginx-1.2.1-hardened9 rancher/nginx-ingress-controller:nginx-1.4.1-hardened2	container-suseconnect	Affected
rancher/nginx-ingress-controller:nginx-1.2.1-hardened7 rancher/nginx-ingress-controller:nginx-1.2.1-hardened9 rancher/nginx-ingress-controller:nginx-1.4.1-hardened2 rancher/nginx-ingress-controller:nginx-1.5.1-rancher2 rancher/nginx-ingress-controller:nginx-1.6.4-hardened4	dbg nginx-ingress-controller wait-shutdown	Affected
rancher/rke-tools:v0.1.88 rancher/rke-tools:v0.1.90	opt/rke-tools/bin/cri-dockerd opt/rke-tools/rke-etcd-backup tmp/bandwidth tmp/bridge tmp/dhcp tmp/firewall tmp/flannel tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/bin/confd usr/local/bin/kubectl	Affected
rancher/rke-tools:v0.1.96	tmp/bandwidth tmp/bridge tmp/dhcp tmp/dummy tmp/firewall tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/local/bin/etcdctl	Affected
rancher/eks-operator:v1.2.3	usr/bin/eks-operator	Affected
rancher/system-agent:v0.3.6-suc	usr/bin/kubectl	Affected
rancher/ui-plugin-operator:v0.1.1	usr/bin/ui-plugin-operator	Affected
rancher/hyperkube:v1.23.16-rancher2	usr/local/bin/kube-apiserver usr/local/bin/kube-controller-manager usr/local/bin/kube-proxy usr/local/bin/kube-scheduler usr/local/bin/kubectl usr/local/bin/kubelet	Affected
rancher/rke2-cloud-provider:v0.0.3-build20211118	usr/local/bin/rke2-cloud-provider	Affected
Rancher v2.8-head
rancher/rke2-runtime:v1.25.16-rke2r1 rancher/rke2-runtime:v1.26.15-rke2r1 rancher/rke2-runtime:v1.27.14-rke2r1 rancher/rke2-runtime:v1.28.10-rke2r1	bin/crictl	Affected
rancher/rke-tools:v0.1.96	tmp/bandwidth tmp/bridge tmp/dhcp tmp/dummy tmp/firewall tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/local/bin/etcdctl	Affected
rancher/ui-plugin-operator:v0.1.1	usr/bin/ui-plugin-operator	Affected
Rancher v2.8.5
rancher/rke2-runtime:v1.25.16-rke2r1 rancher/rke2-runtime:v1.26.15-rke2r1 rancher/rke2-runtime:v1.27.14-rke2r1 rancher/rke2-runtime:v1.28.10-rke2r1	bin/crictl	Affected
rancher/rke-tools:v0.1.96	tmp/bandwidth tmp/bridge tmp/dhcp tmp/dummy tmp/firewall tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/local/bin/etcdctl	Affected
rancher/system-agent:v0.3.6-suc	usr/bin/kubectl	Affected
rancher/rancher-agent:v2.8.5	usr/bin/loglevel	Affected
rancher/rancher:v2.8.5	usr/bin/loglevel usr/share/rancher/ui/assets/wins.exe	Affected
rancher/ui-plugin-operator:v0.1.1	usr/bin/ui-plugin-operator	Affected
Rancher v2.9-head
rancher/rke2-runtime:v1.27.14-rke2r1 rancher/rke2-runtime:v1.28.10-rke2r1	bin/crictl	Affected
rancher/shell:v0.1.19	container-suseconnect	Affected
rancher/rke-tools:v0.1.96 rancher/rke-tools:v0.1.97	tmp/bandwidth tmp/bridge tmp/dhcp tmp/dummy tmp/firewall tmp/host-device tmp/host-local tmp/ipvlan tmp/loopback tmp/macvlan tmp/portmap tmp/ptp tmp/sbr tmp/static tmp/tuning tmp/vlan tmp/vrf usr/local/bin/etcdctl	Affected
rancher/shell:v0.1.19	usr/local/bin/helm usr/local/bin/k9s usr/local/bin/kubectl usr/local/bin/kustomize	Affected

---

SUSE Timeline for this CVE

CVE page created: Wed Feb 15 06:45:18 2023
CVE page last modified: Wed Jul 3 17:47:38 2024