CVE-2026-32283

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
References
Link Resource
https://go.dev/cl/763767 Patch
https://go.dev/issue/78334 Issue Tracking
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU Mailing List Release Notes
https://pkg.go.dev/vuln/GO-2026-4870 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:10217
https://access.redhat.com/errata/RHSA-2026:10219
https://access.redhat.com/errata/RHSA-2026:10704
https://access.redhat.com/errata/RHSA-2026:11507
https://access.redhat.com/errata/RHSA-2026:11514
https://access.redhat.com/errata/RHSA-2026:11704
https://access.redhat.com/errata/RHSA-2026:11711
https://access.redhat.com/errata/RHSA-2026:11712
https://access.redhat.com/errata/RHSA-2026:11863
https://access.redhat.com/errata/RHSA-2026:11881
https://access.redhat.com/errata/RHSA-2026:14162
https://access.redhat.com/errata/RHSA-2026:14200
https://access.redhat.com/errata/RHSA-2026:14391
https://access.redhat.com/errata/RHSA-2026:15980
https://access.redhat.com/errata/RHSA-2026:16021
https://access.redhat.com/errata/RHSA-2026:16024
https://access.redhat.com/errata/RHSA-2026:16101
https://access.redhat.com/errata/RHSA-2026:16102
https://access.redhat.com/errata/RHSA-2026:16875
https://access.redhat.com/errata/RHSA-2026:17075
https://access.redhat.com/errata/RHSA-2026:17084
https://access.redhat.com/errata/RHSA-2026:17287
https://access.redhat.com/errata/RHSA-2026:18027
https://access.redhat.com/errata/RHSA-2026:18032
https://access.redhat.com/errata/RHSA-2026:19126
https://access.redhat.com/errata/RHSA-2026:19132
https://access.redhat.com/errata/RHSA-2026:19133
https://access.redhat.com/errata/RHSA-2026:19134
https://access.redhat.com/errata/RHSA-2026:19135
https://access.redhat.com/errata/RHSA-2026:19136
https://access.redhat.com/errata/RHSA-2026:19137
https://access.redhat.com/errata/RHSA-2026:19139
https://access.redhat.com/errata/RHSA-2026:19144
https://access.redhat.com/errata/RHSA-2026:19156
https://access.redhat.com/errata/RHSA-2026:19350
https://access.redhat.com/errata/RHSA-2026:19351
https://access.redhat.com/errata/RHSA-2026:19352
https://access.redhat.com/errata/RHSA-2026:19353
https://access.redhat.com/errata/RHSA-2026:19369
https://access.redhat.com/errata/RHSA-2026:19450
https://access.redhat.com/errata/RHSA-2026:19550
https://access.redhat.com/errata/RHSA-2026:19634
https://access.redhat.com/errata/RHSA-2026:19714
https://access.redhat.com/errata/RHSA-2026:19715
https://access.redhat.com/errata/RHSA-2026:19719
https://access.redhat.com/errata/RHSA-2026:19720
https://access.redhat.com/errata/RHSA-2026:19721
https://access.redhat.com/errata/RHSA-2026:19722
https://access.redhat.com/errata/RHSA-2026:19750
https://access.redhat.com/errata/RHSA-2026:19839
https://access.redhat.com/errata/RHSA-2026:20556
https://access.redhat.com/errata/RHSA-2026:20569
https://access.redhat.com/errata/RHSA-2026:20570
https://access.redhat.com/errata/RHSA-2026:20571
https://access.redhat.com/errata/RHSA-2026:20607
https://access.redhat.com/errata/RHSA-2026:20608
https://access.redhat.com/errata/RHSA-2026:20609
https://access.redhat.com/errata/RHSA-2026:21769
https://access.redhat.com/errata/RHSA-2026:22347
https://access.redhat.com/errata/RHSA-2026:22423
https://access.redhat.com/errata/RHSA-2026:22450
https://access.redhat.com/errata/RHSA-2026:22485
https://access.redhat.com/errata/RHSA-2026:22709
https://access.redhat.com/errata/RHSA-2026:22713
https://access.redhat.com/errata/RHSA-2026:22714
https://access.redhat.com/errata/RHSA-2026:22937
https://access.redhat.com/errata/RHSA-2026:23102
https://access.redhat.com/errata/RHSA-2026:23103
https://access.redhat.com/errata/RHSA-2026:23228
https://access.redhat.com/errata/RHSA-2026:23345
https://access.redhat.com/errata/RHSA-2026:24337
https://access.redhat.com/errata/RHSA-2026:24470
https://access.redhat.com/errata/RHSA-2026:24761
https://access.redhat.com/errata/RHSA-2026:24762
https://access.redhat.com/errata/RHSA-2026:26447
https://access.redhat.com/errata/RHSA-2026:26571
https://access.redhat.com/errata/RHSA-2026:26636
https://access.redhat.com/errata/RHSA-2026:27076
https://access.redhat.com/errata/RHSA-2026:28038
https://access.redhat.com/errata/RHSA-2026:28047
https://access.redhat.com/errata/RHSA-2026:28074
https://access.redhat.com/errata/RHSA-2026:29035
https://access.redhat.com/errata/RHSA-2026:29195
https://access.redhat.com/errata/RHSA-2026:29455
https://access.redhat.com/errata/RHSA-2026:29703
https://access.redhat.com/errata/RHSA-2026:33722
https://access.redhat.com/errata/RHSA-2026:34192
https://access.redhat.com/errata/RHSA-2026:34196
https://access.redhat.com/errata/RHSA-2026:34197
https://access.redhat.com/errata/RHSA-2026:34365
https://access.redhat.com/errata/RHSA-2026:36796
https://access.redhat.com/errata/RHSA-2026:39810
https://access.redhat.com/errata/RHSA-2026:41019
https://access.redhat.com/errata/RHSA-2026:41928
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:47712
https://access.redhat.com/errata/RHSA-2026:47714
https://access.redhat.com/errata/RHSA-2026:47716
https://access.redhat.com/errata/RHSA-2026:47719
https://access.redhat.com/errata/RHSA-2026:47721
https://access.redhat.com/errata/RHSA-2026:47722
https://access.redhat.com/errata/RHSA-2026:47910
https://access.redhat.com/errata/RHSA-2026:48036
https://access.redhat.com/errata/RHSA-2026:7291
https://access.redhat.com/errata/RHSA-2026:7385
https://access.redhat.com/security/cve/CVE-2026-32283
https://bugzilla.redhat.com/show_bug.cgi?id=2456338
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

History

30 Jul 2026, 12:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:47712 -
  • () https://access.redhat.com/errata/RHSA-2026:47714 -
  • () https://access.redhat.com/errata/RHSA-2026:47716 -
  • () https://access.redhat.com/errata/RHSA-2026:47719 -
  • () https://access.redhat.com/errata/RHSA-2026:47721 -
  • () https://access.redhat.com/errata/RHSA-2026:47722 -
  • () https://access.redhat.com/errata/RHSA-2026:47910 -
  • () https://access.redhat.com/errata/RHSA-2026:48036 -

25 Jul 2026, 10:10

Type Values Removed Values Added
Summary
  • (es) Si una de las partes de la conexión TLS envía múltiples mensajes de actualización de clave después del handshake en un único registro, la conexión puede entrar en un interbloqueo, causando un consumo descontrolado de recursos. Esto puede llevar a una denegación de servicio. Esto solo afecta a TLS 1.3.

21 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:41928 -
  • () https://access.redhat.com/errata/RHSA-2026:42644 -

17 Jul 2026, 13:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:41019 -

15 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:39810 -

09 Jul 2026, 13:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:36796 -

02 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:34192 -
  • () https://access.redhat.com/errata/RHSA-2026:34196 -
  • () https://access.redhat.com/errata/RHSA-2026:34197 -
  • () https://access.redhat.com/errata/RHSA-2026:34365 -

01 Jul 2026, 13:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:33722 -

30 Jun 2026, 03:18

Type Values Removed Values Added
CWE CWE-764
References
  • () https://access.redhat.com/errata/RHSA-2026:10217 -
  • () https://access.redhat.com/errata/RHSA-2026:10219 -
  • () https://access.redhat.com/errata/RHSA-2026:10704 -
  • () https://access.redhat.com/errata/RHSA-2026:11507 -
  • () https://access.redhat.com/errata/RHSA-2026:11514 -
  • () https://access.redhat.com/errata/RHSA-2026:11704 -
  • () https://access.redhat.com/errata/RHSA-2026:11711 -
  • () https://access.redhat.com/errata/RHSA-2026:11712 -
  • () https://access.redhat.com/errata/RHSA-2026:11863 -
  • () https://access.redhat.com/errata/RHSA-2026:11881 -
  • () https://access.redhat.com/errata/RHSA-2026:14162 -
  • () https://access.redhat.com/errata/RHSA-2026:14200 -
  • () https://access.redhat.com/errata/RHSA-2026:14391 -
  • () https://access.redhat.com/errata/RHSA-2026:15980 -
  • () https://access.redhat.com/errata/RHSA-2026:16021 -
  • () https://access.redhat.com/errata/RHSA-2026:16024 -
  • () https://access.redhat.com/errata/RHSA-2026:16101 -
  • () https://access.redhat.com/errata/RHSA-2026:16102 -
  • () https://access.redhat.com/errata/RHSA-2026:16875 -
  • () https://access.redhat.com/errata/RHSA-2026:17075 -
  • () https://access.redhat.com/errata/RHSA-2026:17084 -
  • () https://access.redhat.com/errata/RHSA-2026:17287 -
  • () https://access.redhat.com/errata/RHSA-2026:18027 -
  • () https://access.redhat.com/errata/RHSA-2026:18032 -
  • () https://access.redhat.com/errata/RHSA-2026:19126 -
  • () https://access.redhat.com/errata/RHSA-2026:19132 -
  • () https://access.redhat.com/errata/RHSA-2026:19133 -
  • () https://access.redhat.com/errata/RHSA-2026:19134 -
  • () https://access.redhat.com/errata/RHSA-2026:19135 -
  • () https://access.redhat.com/errata/RHSA-2026:19136 -
  • () https://access.redhat.com/errata/RHSA-2026:19137 -
  • () https://access.redhat.com/errata/RHSA-2026:19139 -
  • () https://access.redhat.com/errata/RHSA-2026:19144 -
  • () https://access.redhat.com/errata/RHSA-2026:19156 -
  • () https://access.redhat.com/errata/RHSA-2026:19350 -
  • () https://access.redhat.com/errata/RHSA-2026:19351 -
  • () https://access.redhat.com/errata/RHSA-2026:19352 -
  • () https://access.redhat.com/errata/RHSA-2026:19353 -
  • () https://access.redhat.com/errata/RHSA-2026:19369 -
  • () https://access.redhat.com/errata/RHSA-2026:19450 -
  • () https://access.redhat.com/errata/RHSA-2026:19550 -
  • () https://access.redhat.com/errata/RHSA-2026:19634 -
  • () https://access.redhat.com/errata/RHSA-2026:19714 -
  • () https://access.redhat.com/errata/RHSA-2026:19715 -
  • () https://access.redhat.com/errata/RHSA-2026:19719 -
  • () https://access.redhat.com/errata/RHSA-2026:19720 -
  • () https://access.redhat.com/errata/RHSA-2026:19721 -
  • () https://access.redhat.com/errata/RHSA-2026:19722 -
  • () https://access.redhat.com/errata/RHSA-2026:19750 -
  • () https://access.redhat.com/errata/RHSA-2026:19839 -
  • () https://access.redhat.com/errata/RHSA-2026:20556 -
  • () https://access.redhat.com/errata/RHSA-2026:20569 -
  • () https://access.redhat.com/errata/RHSA-2026:20570 -
  • () https://access.redhat.com/errata/RHSA-2026:20571 -
  • () https://access.redhat.com/errata/RHSA-2026:20607 -
  • () https://access.redhat.com/errata/RHSA-2026:20608 -
  • () https://access.redhat.com/errata/RHSA-2026:20609 -
  • () https://access.redhat.com/errata/RHSA-2026:21769 -
  • () https://access.redhat.com/errata/RHSA-2026:22347 -
  • () https://access.redhat.com/errata/RHSA-2026:22423 -
  • () https://access.redhat.com/errata/RHSA-2026:22450 -
  • () https://access.redhat.com/errata/RHSA-2026:22485 -
  • () https://access.redhat.com/errata/RHSA-2026:22709 -
  • () https://access.redhat.com/errata/RHSA-2026:22713 -
  • () https://access.redhat.com/errata/RHSA-2026:22714 -
  • () https://access.redhat.com/errata/RHSA-2026:22937 -
  • () https://access.redhat.com/errata/RHSA-2026:23102 -
  • () https://access.redhat.com/errata/RHSA-2026:23103 -
  • () https://access.redhat.com/errata/RHSA-2026:23228 -
  • () https://access.redhat.com/errata/RHSA-2026:23345 -
  • () https://access.redhat.com/errata/RHSA-2026:24337 -
  • () https://access.redhat.com/errata/RHSA-2026:24470 -
  • () https://access.redhat.com/errata/RHSA-2026:24761 -
  • () https://access.redhat.com/errata/RHSA-2026:24762 -
  • () https://access.redhat.com/errata/RHSA-2026:26447 -
  • () https://access.redhat.com/errata/RHSA-2026:26571 -
  • () https://access.redhat.com/errata/RHSA-2026:26636 -
  • () https://access.redhat.com/errata/RHSA-2026:27076 -
  • () https://access.redhat.com/errata/RHSA-2026:28038 -
  • () https://access.redhat.com/errata/RHSA-2026:28047 -
  • () https://access.redhat.com/errata/RHSA-2026:28074 -
  • () https://access.redhat.com/errata/RHSA-2026:29035 -
  • () https://access.redhat.com/errata/RHSA-2026:29195 -
  • () https://access.redhat.com/errata/RHSA-2026:29455 -
  • () https://access.redhat.com/errata/RHSA-2026:29703 -
  • () https://access.redhat.com/errata/RHSA-2026:7291 -
  • () https://access.redhat.com/errata/RHSA-2026:7385 -
  • () https://access.redhat.com/security/cve/CVE-2026-32283 -
  • () https://bugzilla.redhat.com/show_bug.cgi?id=2456338 -
  • () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json -

17 Jun 2026, 10:35

Type Values Removed Values Added
References () https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU - Release Notes, Mailing List () https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU - Mailing List, Release Notes

16 Apr 2026, 19:12

Type Values Removed Values Added
References () https://go.dev/cl/763767 - () https://go.dev/cl/763767 - Patch
References () https://go.dev/issue/78334 - () https://go.dev/issue/78334 - Issue Tracking
References () https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU - () https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU - Release Notes, Mailing List
References () https://pkg.go.dev/vuln/GO-2026-4870 - () https://pkg.go.dev/vuln/GO-2026-4870 - Vendor Advisory
CPE cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
First Time Golang go
Golang
CWE CWE-770

13 Apr 2026, 19:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

08 Apr 2026, 02:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-08 02:16

Updated : 2026-07-30 12:18


NVD link : CVE-2026-32283

Mitre link : CVE-2026-32283

CVE.ORG link : CVE-2026-32283


JSON object : View

Products Affected

golang

  • go
CWE
CWE-770

Allocation of Resources Without Limits or Throttling

CWE-764

Multiple Locks of a Critical Resource