LOW3.1

GO-2022-0531

Session tickets lack random ticket_age_add in crypto/tls

Quick fix

GO-2022-0531 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.17.11

Details

An attacker can correlate a resumed TLS session with a previous connection.

Session tickets generated by crypto/tls do not contain a randomly generated ticket_age_add, which allows an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/stdlib

Introduced in: 0Fixed in: 1.17.11

Fixgo get stdlib@v1.17.11

References

https://go.dev/cl/405994[FIX]
https://go.googlesource.com/go/+/fe4de36198794c447fbd9d7cc2d7199a506c76a5[FIX]
https://go.dev/issue/52814[REPORT]
https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ[WEB]