Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-binUpgrade go-toolsetUpgrade golang-docs | May 4, 2022 | Aug 7, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 7, 2021 |
| Centos_linux | — | Upgrade golangUpgrade delveUpgrade go-toolsetUpgrade golang-miscUpgrade golang-raceUpgrade golang-srcUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade golang-bin | Sep 22, 2021 | Aug 7, 2021 |
| Debian | — | No solution exists | May 15, 2025 | Aug 7, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Nov 12, 2021 | Aug 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 2, 2021 | Aug 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 28, 2022 | Aug 7, 2021 |
| Oracle_linux | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-raceUpgrade go-toolsetUpgrade golang-miscUpgrade delveUpgrade golang-src | Sep 23, 2021 | Mar 22, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade cri-toolsUpgrade golang-github-prometheus-promuUpgrade ignitionUpgrade cri-oUpgrade windows-machine-config-rhel8-operator | Feb 24, 2022 | Mar 22, 2021 |
| Redhat_linux | — | Upgrade delveUpgrade golang-docsUpgrade delve-debuginfoUpgrade go-toolsetUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-srcNo solution existsUpgrade golangUpgrade golang-miscUpgrade golang-raceUpgrade golang-tests | Sep 22, 2021 | Aug 7, 2021 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-binUpgrade delve | Mar 12, 2024 | Aug 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub