title: Session tickets lack random ticket_age_add in crypto/tls
description: Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.
problem types: CWE-200: Information Exposure
affected:
{
vendor: Go standard library
product: crypto/tls
collectionURL: https://pkg.go.dev
packageName: crypto/tls
versions:
version: 0, lessThan: 1.17.11, status: affected, versionType: semver
version: 1.18.0-0, lessThan: 1.18.3, status: affected, versionType: semver
programRoutines:
name: serverHandshakeStateTLS13.sendSessionTickets
defaultStatus: unaffected
}