CVE-2026-32283
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
| Vendor | go standard library |
| Product | crypto/tls |
| Published | Apr 8, 2026 |
| Last Updated | Jul 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for go standard library crypto/tls
Be the first to know when new high vulnerabilities affecting go standard library crypto/tls are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Go standard library / crypto/tls
0 < 1.25.9 1.26.0-0 < 1.26.2
References
go.dev: https://go.dev/cl/763767 go.dev: https://go.dev/issue/78334 groups.google.com: https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4870 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-32283 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2456338 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24762 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16101 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24761 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:27076 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14391 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39810 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34365 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20569 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23103 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19715 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16024 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19550 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:18032 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:18027 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17084 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19719 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19750 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20570 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22713 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19714 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20571 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10217 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11712 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11881 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11863 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17075 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29195 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23102 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19133 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19139 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19137 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19134 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19136 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22937 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19144 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19135 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24470 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19156 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19132 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29035 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19126 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33722 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10704 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16875 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11507 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11514 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:15980 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19634 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16102 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34192 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34196 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34197 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19721 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20607 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20608 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19722 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16021 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20556 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19839 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28038 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19720 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22709 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17287 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24337 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20609 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14200 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10219 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11711 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11704 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29455 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29703 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19350 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19352 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19351 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23228 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19353 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22714 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26447 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19369 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28074 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26571 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26636 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22423 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22347 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23345 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7385 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7291 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22485 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42644 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14162
Credits
Jakub Ciolek - https://ciolek.dev/