Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade golang-binUpgrade delveUpgrade go-toolsetUpgrade golang-srcUpgrade golang-raceUpgrade golang-testsUpgrade golangUpgrade golang-misc | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade nomadUpgrade go | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docs | Jul 4, 2022 | Jan 1, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Dec 16, 2021 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golang-src | Feb 17, 2025 | Dec 9, 2021 |
| Centos_linux | — | Upgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade go-toolsetUpgrade delve-debuginfoUpgrade delveUpgrade golang-raceUpgrade golang-testsUpgrade golang-binUpgrade delve-debugsourceUpgrade golang-misc | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade golang-1.15 | Jan 24, 2022 | Jan 1, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Dec 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade golang-docsUpgrade go-toolsetUpgrade golang-binUpgrade delveUpgrade golang-raceUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-src | Dec 17, 2021 | Dec 9, 2021 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade openshift-clientsUpgrade openshiftUpgrade butaneUpgrade cri-oUpgrade ignitionUpgrade containernetworking-pluginsUpgrade runc | Mar 11, 2022 | Dec 9, 2021 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade go-toolsetUpgrade delveUpgrade golang-srcUpgrade golang-docsUpgrade golang-miscUpgrade golang-raceNo solution existsUpgrade golangUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-bin | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade golangUpgrade delve-debuginfoUpgrade golang-raceUpgrade delveUpgrade go-toolsetUpgrade golang-binUpgrade delve-debugsource | Mar 12, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade go1.16Upgrade go1.16-raceUpgrade go1.17Upgrade go1.17-docUpgrade go1.17-raceUpgrade go1.16-doc | Dec 25, 2021 | Dec 16, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub