CVE-2021-34558

CVE-2021-34558 is a medium-severity vulnerability affecting the crypto/tls package in Go versions up to 1.16.5, as well as products from Fedora Project, Golang, NetApp, and Oracle. It allows a malicious TLS server to trigger a client panic by presenting an X.509 certificate with a mismatched public key type during an RSA-based key exchange. The attack vector is network-based with low complexity, requiring no user interaction, and its primary impact is a denial of service. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.