Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade grafanaUpgrade buildah-testsUpgrade buildah | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-sharedUpgrade golang-testsUpgrade golang-raceUpgrade golang-binUpgrade golang-docs | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade buildah-debuginfoUpgrade golangUpgrade golang-srcUpgrade buildahUpgrade golang-miscUpgrade buildah-testsUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade golang-binUpgrade delveUpgrade golang-testsUpgrade buildah-debugsourceUpgrade go-toolsetUpgrade grafanaUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade grafanaUpgrade buildah-testsUpgrade buildah | Nov 17, 2021 | May 18, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade cri-oUpgrade openshift-clientsUpgrade golang-github-prometheus-promuUpgrade redhat-release-coreosUpgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade windows-machine-config-rhel8-operatorUpgrade cri-toolsUpgrade openshiftUpgrade ignition | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade golang-raceUpgrade buildah-testsUpgrade golang-miscUpgrade delveUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade golangUpgrade grafanaUpgrade buildah-debuginfoUpgrade golang-testsUpgrade golang-binNo solution existsUpgrade delve-debugsourceUpgrade buildahUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade golang-raceUpgrade golangUpgrade grafanaUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade delveUpgrade delve-debuginfo | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15-raceUpgrade go1.16-raceUpgrade go1.15-docUpgrade go1.15Upgrade go1.16-docUpgrade go1.16 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub