VDB
RHSA-2026:65343
RHSA-2026:65343
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fc2617928b38e2f8bc252838af01dc6cf68a0d9a39bc94f0b96e9ac5a80e042a_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fc2617928b38e2f8bc252838af01dc6cf68a0d9a39bc94f0b96e9ac5a80e042a_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:6f074646be173e3aee7855a72c5a8e51b305973a7b77df1b1c8099a8c27d54f7_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9@sha256:db7593ef37b8d7dabbdad4631d1dd49ef82ad8ccf44edd1a78d2f47e221335bf_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9@sha256:fa340890422052956c762adbfa853fb96fa71b198eee6994cda4f50f0b0f52ba_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:c1ea018ea61723ed980030568929e19650597a5e2f551666b801d22ca3165e19_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:43db927dc3b1c5f63b07e605e55514b352422fe48e8e41befcbb65ba001446e7_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc3babeed69fcaa182e45bad664c9df15933ceb44122ccd5cca6b5dce6e423d1_s390x as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:c1ea018ea61723ed980030568929e19650597a5e2f551666b801d22ca3165e19_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:ce8d9e3d064ca63628fe1addbca3b098687b767a7829c948f360f738e01056a5_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:34443daf80df70881343176abfa2d39a0e3e405f496538eb615d1318c28d21a9_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:d477a7ec505b29bf86860c3d3ad3787b7be84e4634e4f6c4c9b2fcfd75037eb8_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:3dc8064a3c9df9bcededaa9e07928243c89c4a5e1957aa1ccef5830372f12def_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:d477a7ec505b29bf86860c3d3ad3787b7be84e4634e4f6c4c9b2fcfd75037eb8_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:aaf153c236bd868a88eb7996e0cf393a00186b789b3ea0a338e4adc6a7a8b550_s390x as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:4f8bce8339b7f56fd235e55d174ab6ddffe7faaea218dbe68dffc8ad2b52c7d5_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-rhel9@sha256:715cbe4ceee09c038a3882bf4ad7aa17f04c8c971e4fe49bc71731c531ba83ef_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:169957c61edea0e7f2514d2d666830aa08721f5498a7740bd212c00bacef492b_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:6f074646be173e3aee7855a72c5a8e51b305973a7b77df1b1c8099a8c27d54f7_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.1 | *, * |
| Red Hat | registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:55a6f2354f3a0c28d9fa71aa05a33a3f03cc9106a20dba685fc47910b476390e_s390x as a component of Red Hat OpenShift distributed tracing 3.11.0 | * |
…and 31 more
Timeline
- Sep 8, 2026 CVE Published
- Sep 18, 2026 CVE Updated
- Sep 18, 2026 Distribution Patch
- Sep 18, 2026 Distribution Patch
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
- Sep 18, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:65343 advisory
- https://access.redhat.com/security/cve/CVE-2026-32283 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-48586 advisory
- https://access.redhat.com/security/cve/CVE-2026-55969 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65343.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2456338 issue
- https://www.cve.org/CVERecord?id=CVE-2026-32283 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32283 advisory
- https://go.dev/cl/763767 advisory
…and 69 more