CVE-2026-42505

Public on 2026-07-08
Modified on 2026-10-09
Description
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core amazon-cloudwatch-agent 2026-08-04 ALAS2-2026-3844 Fixed
Amazon Linux 2023 amazon-cloudwatch-agent 2026-08-04 ALAS2023-2026-2025 Fixed
Amazon Linux 2 - Docker Extra amazon-ecr-credential-helper 2026-10-12 ALAS2DOCKER-2026-145 Fixed
Amazon Linux 2 - Ecs Extra amazon-ecr-credential-helper 2026-10-12 ALAS2ECS-2026-142 Fixed
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra amazon-ecr-credential-helper 2026-10-12 ALAS2NITRO-ENCLAVES-2026-121 Fixed
Amazon Linux 2023 amazon-ecr-credential-helper 2026-10-12 ALAS2023-2026-3180 Fixed
Amazon Linux 2 - Core amazon-ssm-agent 2026-09-28 ALAS2-2026-3933 Fixed
Amazon Linux 2 - Core amazon-ssm-agent 2026-10-01 ALAS2-2026-3963 Fixed
Amazon Linux 2023 amazon-ssm-agent 2026-09-29 ALAS2023-2026-3110 Fixed
Amazon Linux 2023 amazon-ssm-agent 2026-09-30 ALAS2023-2026-3149 Fixed
Amazon Linux 2 - Core cni-plugins No Fix Planned
Amazon Linux 2023 cni-plugins No Fix Planned
Amazon Linux 2 - Docker Extra containerd 2026-09-10 ALAS2DOCKER-2026-140 Fixed
Amazon Linux 2 - Ecs Extra containerd 2026-09-10 ALAS2ECS-2026-136 Fixed
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra containerd 2026-09-10 ALAS2NITRO-ENCLAVES-2026-118 Fixed
Amazon Linux 2023 containerd 2026-09-10 ALAS2023-2026-2131 Fixed
Amazon Linux 2023 credentials-fetcher 2026-07-20 ALAS2023-2026-1975 Fixed
Amazon Linux 2 - Core cri-tools No Fix Planned
Amazon Linux 2 - Docker Extra docker 2026-10-12 ALAS2DOCKER-2026-146 Fixed
Amazon Linux 2 - Ecs Extra docker 2026-10-12 ALAS2ECS-2026-143 Fixed
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra docker 2026-10-12 ALAS2NITRO-ENCLAVES-2026-122 Fixed
Amazon Linux 2023 docker 2026-10-12 ALAS2023-2026-3205 Fixed
Amazon Linux 2 - Ecs Extra ecs-init No Fix Planned
Amazon Linux 2023 ecs-init No Fix Planned
Amazon Linux 2023 git-lfs No Fix Planned
Amazon Linux 2 - Core golang 2026-07-20 ALAS2-2026-3819 Fixed
Amazon Linux 2023 golang 2026-07-20 ALAS2023-2026-1979 Fixed
Amazon Linux 2023 golang-github-burntsushi-toml 2026-07-20 ALAS2023-2026-1978 Fixed
Amazon Linux 2023 golang-github-burntsushi-toml-test 2026-07-20 ALAS2023-2026-1977 Fixed
Amazon Linux 2023 golang-github-cpuguy83-md2man 2026-07-20 ALAS2023-2026-1989 Fixed
Amazon Linux 2 - Core golist 2026-07-20 ALAS2-2026-3818 Fixed
Amazon Linux 2023 golist 2026-07-20 ALAS2023-2026-1976 Fixed
Amazon Linux 2023 libcap No Fix Planned
Amazon Linux 2 - Core nerdctl 2026-09-14 ALAS2-2026-3903 Fixed
Amazon Linux 2023 nerdctl 2026-09-14 ALAS2023-2026-2129 Fixed
Amazon Linux 2 - Docker Extra oci-add-hooks 2026-10-12 ALAS2DOCKER-2026-147 Fixed
Amazon Linux 2 - Ecs Extra oci-add-hooks 2026-10-12 ALAS2ECS-2026-144 Fixed
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra oci-add-hooks 2026-10-12 ALAS2NITRO-ENCLAVES-2026-123 Fixed
Amazon Linux 2023 oci-add-hooks 2026-10-12 ALAS2023-2026-3206 Fixed
Amazon Linux 2 - Core rclone No Fix Planned
Amazon Linux 2023 rclone 2026-09-29 ALAS2023-2026-3129 Fixed
Amazon Linux 2027 Preview rclone 2026-09-28 ALAS2027-2026-105 Fixed
Amazon Linux 2 - Docker Extra runc 2026-09-14 ALAS2DOCKER-2026-141 Fixed
Amazon Linux 2 - Ecs Extra runc 2026-09-28 ALAS2ECS-2026-138 Fixed
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra runc 2026-09-14 ALAS2NITRO-ENCLAVES-2026-119 Fixed
Amazon Linux 2023 runc 2026-09-14 ALAS2023-2026-2138 Fixed
Amazon Linux 2 - Docker Extra runfinch-finch 2026-08-04 ALAS2DOCKER-2026-137 Fixed
Amazon Linux 2023 runfinch-finch 2026-08-04 ALAS2023-2026-2023 Fixed
Amazon Linux 2 - Docker Extra soci-snapshotter 2026-10-12 ALAS2DOCKER-2026-143 Fixed
Amazon Linux 2023 soci-snapshotter 2026-10-12 ALAS2023-2026-3153 Fixed
Amazon Linux 2023 yq No Fix Planned

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N