Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade buildah-testsUpgrade grafanaUpgrade delve | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade golang-raceUpgrade golangUpgrade golang-srcUpgrade golang-misc | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade golang-srcUpgrade golang-miscUpgrade delve-debugsourceUpgrade golang-raceUpgrade buildah-debuginfoUpgrade golangUpgrade buildahUpgrade delve-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade buildah-debugsourceUpgrade golang-docsUpgrade grafanaUpgrade go-toolsetUpgrade delveUpgrade golang-testsUpgrade golang-bin | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade buildahUpgrade grafana | Nov 17, 2021 | May 18, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operatorUpgrade cri-toolsUpgrade openshiftUpgrade ignitionUpgrade golang-github-prometheus-promuUpgrade cri-oUpgrade redhat-release-coreosUpgrade butaneUpgrade openshift-clientsUpgrade atomic-openshift-service-idlerUpgrade containernetworking-plugins | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade golang-srcUpgrade golangUpgrade golang-raceUpgrade grafanaUpgrade delve-debuginfoUpgrade go-toolsetUpgrade buildah-testsUpgrade delveUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade golang-docsUpgrade buildah-debuginfoUpgrade golang-binUpgrade delve-debugsourceUpgrade golang-testsUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade buildahNo solution exists | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade delveUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade golang-binUpgrade delve-debugsourceUpgrade golangUpgrade grafanaUpgrade golang-raceUpgrade go-toolset | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.16Upgrade go1.16-raceUpgrade go1.15-raceUpgrade go1.15Upgrade go1.16-docUpgrade go1.15-doc | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub