1"use strict";(self.webpackChunkspectro_cloud_docs=self.webpackChunkspectro_cloud_docs||[]).push([["11186"],{124580:function(e,t,i){i.r(t),i.d(t,{frontMatter:()=>l,toc:()=>d,default:()=>h,metadata:()=>s,assets:()=>a,contentTitle:()=>c});var s=JSON.parse('{"id":"security-bulletins/reports/vc-cve-2022-41724","title":"CVE-2022-41724","description":"Lifecycle of CVE-2022-41724","source":"@site/docs/docs-content/security-bulletins/reports/vc-cve-2022-41724.md","sourceDirName":"security-bulletins/reports","slug":"/security-bulletins/reports/vc-cve-2022-41724","permalink":"/security-bulletins/reports/vc-cve-2022-41724","draft":false,"unlisted":false,"editUrl":"https://github.com/spectrocloud/librarium/blob/master/docs/docs-content/security-bulletins/reports/vc-cve-2022-41724.md","tags":[{"inline":true,"label":"security","permalink":"/tags/security"},{"inline":true,"label":"cve","permalink":"/tags/cve"}],"version":"current","lastUpdatedAt":null,"frontMatter":{"sidebar_label":"CVE-2022-41724","title":"CVE-2022-41724","description":"Lifecycle of CVE-2022-41724","sidebar_class_name":"hide-from-sidebar","hide_table_of_contents":false,"toc_max_heading_level":2,"tags":["security","cve"]},"sidebar":"docSidebar","previous":{"title":"CVE-2022-41723","permalink":"/security-bulletins/reports/vc-cve-2022-41723"},"next":{"title":"CVE-2022-41725","permalink":"/security-bulletins/reports/vc-cve-2022-41725"}}'),n=i(474848),r=i(884429);let l={sidebar_label:"CVE-2022-41724",title:"CVE-2022-41724",description:"Lifecycle of CVE-2022-41724",sidebar_class_name:"hide-from-sidebar",hide_table_of_contents:!1,toc_max_heading_level:2,tags:["security","cve"]},c,a={},d=[{value:"CVE Details",id:"cve-details",level:2},{value:"Initial Publication",id:"initial-publication",level:2},{value:"Last Update",id:"last-update",level:2},{value:"Third Party Dependency",id:"third-party-dependency",level:2},{value:"NIST CVE Summary",id:"nist-cve-summary",level:2},{value:"CVE Severity",id:"cve-severity",level:2},{value:"Our Official Summary",id:"our-official-summary",level:2},{value:"Status",id:"status",level:2},{value:"Affected Products & Versions",id:"affected-products--versions",level:2},{value:"Revision History",id:"revision-history",level:2}];function o(e){let t={a:"a",h2:"h2",p:"p",table:"table",tbody:"tbody",td:"td",th:"th",thead:"thead",tr:"tr",...(0,r.R)(),...e.components};return(0,n.jsxs)(n.Fragment,{children:[(0,n.jsx)(t.h2,{id:"cve-details",children:"CVE Details"}),"\n",(0,n.jsxs)(t.p,{children:["Visit the official vulnerability details page for ",(0,n.jsx)(t.a,{href:"https://nvd.nist.gov/vuln/detail/cve-2022-41724",children:"CVE-2022-41724"})," to learn more."]}),"\n",(0,n.jsx)(t.h2,{id:"initial-publication",children:"Initial Publication"}),"\n",(0,n.jsx)(t.p,{children:"10/25/2024"}),"\n",(0,n.jsx)(t.h2,{id:"last-update",children:"Last Update"}),"\n",(0,n.jsx)(t.p,{children:"12/16/2024"}),"\n",(0,n.jsx)(t.h2,{id:"third-party-dependency",children:"Third Party Dependency"}),"\n",(0,n.jsx)(t.p,{children:"go"}),"\n",(0,n.jsx)(t.h2,{id:"nist-cve-summary",children:"NIST CVE Summary"}),"\n",(0,n.jsx)(t.p,{children:"Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert)."}),"\n",(0,n.jsx)(t.h2,{id:"cve-severity",children:"CVE Severity"}),"\n",(0,n.jsx)(t.p,{children:(0,n.jsx)(t.a,{href:"https://nvd.nist.gov/vuln/detail/cve-2022-41724",children:"7.5"})}),"\n",(0,n.jsx)(t.h2,{id:"our-official-summary",children:"Our Official Summary"}),"\n",(0,n.jsx)(t.p,{children:"This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used."}),"\n",(0,n.jsx)(t.h2,{id:"status",children:"Status"}),"\n",(0,n.jsx)(t.p,{children:"Ongoing"}),"\n",(0,n.jsx)(t.h2,{id:"affected-products--versions",children:"Affected Products & Versions"}),"\n",(0,n.jsxs)(t.table,{children:[(0,n.jsx)(t.thead,{children:(0,n.jsxs)(t.tr,{children:[(0,n.jsx)(t.th,{children:"Version"}),(0,n.jsx)(t.th,{children:"Palette Enterprise"}),(0,n.jsx)(t.th,{children:"Palette Enterprise Airgap"}),(0,n.jsx)(t.th,{children:"VerteX"}),(0,n.jsx)(t.th,{children:"VerteX Airgap"})]})}),(0,n.jsxs)(t.tbody,{children:[(0,n.jsxs)(t.tr,{children:[(0,n.jsx)(t.td,{children:"4.5.22"}),(0,n.jsx)(t.td,{children:"\u26A0\uFE0F Impacted"}),(0,n.jsx)(t.td,{children:"\u26A0\uFE0F Impacted"}),(0,n.jsx)(t.td,{children:"\u2705 No Impact"}),(0,n.jsx)(t.td,{children:"\u2705 No Impact"})]}),(0,n.jsxs)(t.tr,{children:[(0,n.jsx)(t.td,{children:"4.4.20"}),(0,n.jsx)(t.td,{children:"\u26A0\uFE0F Impacted"}),(0,n.jsx)(t.td,{children:"\u26A0\uFE0F Impacted"}),(0,n.jsx)(t.td,{children:"\u26A0\uFE0F Impacted"}),(0,n.jsx)(t.td,{children:"\u2705 No Impact"})]})]})]}),"\n",(0,n.jsx)(t.h2,{id:"revision-history",children:"Revision History"}),"\n",(0,n.jsx)(t.p,{children:"No revisions available."})]})}function h(e={}){let{wrapper:t}={...(0,r.R)(),...e.components};return t?(0,n.jsx)(t,{...e,children:(0,n.jsx)(o,{...e})}):o(e)}},884429:function(e,t,i){i.d(t,{R:()=>l,x:()=>c});var s=i(296540);let n={},r=s.createContext(n);function l(e){let t=s.useContext(r);return s.useMemo(function(){return"function"==typeof e?e(t):{...t,...e}},[t,e])}function c(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(n):e.components||n:l(e.components),s.createElement(r.Provider,{value:t},e.children)}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.