Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade golang-binUpgrade go-toolsetUpgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-race | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade goUpgrade nomad | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | Jul 4, 2022 | Jan 1, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Dec 16, 2021 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade golang-binUpgrade golang-tests | Feb 17, 2025 | Dec 9, 2021 |
| Centos_linux | — | Upgrade golang-docsUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golangUpgrade golang-srcUpgrade delveUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade delve-debugsourceUpgrade golang-race | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jan 24, 2022 | Jan 1, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Dec 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-raceUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade delveUpgrade go-toolsetUpgrade golang-docsUpgrade golang-bin | Dec 17, 2021 | Dec 9, 2021 |
| Redhat Openshift | — | Upgrade containernetworking-pluginsUpgrade runcUpgrade ignitionUpgrade butaneUpgrade cri-oUpgrade cri-toolsUpgrade openshift-clientsUpgrade openshift | Mar 11, 2022 | Dec 9, 2021 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade delveUpgrade go-toolsetUpgrade golang-srcNo solution existsUpgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-misc | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade golang-binUpgrade delveUpgrade delve-debugsourceUpgrade go-toolsetUpgrade golang-raceUpgrade delve-debuginfoUpgrade golang | Mar 12, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade go1.17Upgrade go1.17-docUpgrade go1.16Upgrade go1.16-raceUpgrade go1.17-raceUpgrade go1.16-doc | Dec 25, 2021 | Dec 16, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub