Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade grafanaUpgrade buildahUpgrade buildah-tests | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-race | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade buildahUpgrade delve-debugsourceUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade golangUpgrade golang-miscUpgrade buildah-debuginfoUpgrade golang-raceUpgrade delve-debuginfoUpgrade buildah-testsUpgrade grafana-debuginfoUpgrade golang-testsUpgrade buildah-debugsourceUpgrade golang-binUpgrade go-toolsetUpgrade delveUpgrade grafanaUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade grafanaUpgrade buildah-testsUpgrade buildah | Nov 17, 2021 | May 18, 2021 |
| Redhat Openshift | — | Upgrade golang-github-prometheus-promuUpgrade openshift-clientsUpgrade containernetworking-pluginsUpgrade redhat-release-coreosUpgrade butaneUpgrade atomic-openshift-service-idlerUpgrade cri-oUpgrade openshiftUpgrade windows-machine-config-rhel8-operatorUpgrade cri-toolsUpgrade ignition | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade golang-binUpgrade golang-testsUpgrade delve-debugsourceUpgrade buildahUpgrade grafana-debuginfoUpgrade buildah-debuginfoNo solution existsUpgrade buildah-debugsourceUpgrade golang-docsUpgrade delve-debuginfoUpgrade golangUpgrade buildah-testsUpgrade golang-srcUpgrade delveUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade go-toolsetUpgrade golang-misc | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade golangUpgrade golang-raceUpgrade go-toolsetUpgrade grafanaUpgrade delve-debugsourceUpgrade golang-binUpgrade delve-debuginfoUpgrade grafana-debuginfoUpgrade delve | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15-docUpgrade go1.16-raceUpgrade go1.16-docUpgrade go1.15-raceUpgrade go1.15Upgrade go1.16 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub