Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildah-testsUpgrade buildahUpgrade delveUpgrade grafana | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-raceUpgrade golang-tests | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade grafanaUpgrade delveUpgrade go-toolsetUpgrade buildah-debugsourceUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade delve-debuginfoUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade golang-raceUpgrade delve-debugsourceUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade golang-srcUpgrade golangUpgrade golang-misc | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade buildahUpgrade grafana | Nov 17, 2021 | May 18, 2021 |
| Redhat Openshift | — | Upgrade openshiftUpgrade cri-toolsUpgrade ignitionUpgrade windows-machine-config-rhel8-operatorUpgrade golang-github-prometheus-promuUpgrade butaneUpgrade cri-oUpgrade atomic-openshift-service-idlerUpgrade redhat-release-coreosUpgrade openshift-clientsUpgrade containernetworking-plugins | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade golang-miscUpgrade golangUpgrade delveUpgrade buildah-tests-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade golang-srcUpgrade grafanaUpgrade delve-debuginfoUpgrade buildah-testsUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-docsUpgrade grafana-debuginfoNo solution existsUpgrade golang-testsUpgrade buildahUpgrade buildah-debuginfoUpgrade buildah-debugsource | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade golangUpgrade go-toolsetUpgrade golang-raceUpgrade grafanaUpgrade golang-binUpgrade delve-debuginfoUpgrade delveUpgrade delve-debugsourceUpgrade grafana-debuginfo | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15-docUpgrade go1.15Upgrade go1.16-docUpgrade go1.16-raceUpgrade go1.15-raceUpgrade go1.16 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub