go -- crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parametersentered 2021-07-12
no CVE referenced
CVE details
CVE-2021-34558
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
- Score
- 6.5 medium
- Published
- 2021-07-15
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.