The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-lfsUpgrade golang-miscUpgrade golang-srcUpgrade grafanaUpgrade delveUpgrade go-toolsetUpgrade golang-testsUpgrade golangUpgrade golang-binUpgrade grafana-selinuxUpgrade golang-docs | Jul 3, 2024 | Jun 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jun 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade docker-debuginfoUpgrade runc-debuginfoUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade containerd-debuginfoUpgrade golang-docsUpgrade nerdctlUpgrade ecs-initUpgrade cri-toolsUpgrade cri-tools-debuginfoUpgrade nerdctl-debuginfoUpgrade dockerUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade runcUpgrade golangUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-bin | Jun 26, 2024 | Jun 5, 2024 |
| Amazon_linux | — | Upgrade amazon-ssm-agent | Oct 4, 2024 | Jun 5, 2024 |
| Amazon_linux_2023 | — | Upgrade containerd-stressUpgrade cni-pluginsUpgrade golang-srcUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade runcUpgrade docker-debuginfoUpgrade golang-miscUpgrade golang-testsUpgrade docker-debugsourceUpgrade dockerUpgrade golangUpgrade golang-binUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade cni-plugins-debuginfoUpgrade containerdUpgrade runc-debugsourceUpgrade containerd-debuginfoUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade cni-plugins-debugsourceUpgrade runc-debuginfo | Feb 17, 2025 | Jun 4, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade oauth2-proxyUpgrade traefikUpgrade go121 | Oct 18, 2024 | Oct 18, 2024 |
| Oracle_linux | — | Upgrade terraform-provider-oci-fipsUpgrade golangUpgrade golang-srcUpgrade golang-docsUpgrade go-toolsetUpgrade git-lfsUpgrade golang-miscUpgrade grafanaUpgrade grafana-selinuxUpgrade golang-testsUpgrade delveUpgrade golang-bin | Jul 3, 2024 | Jun 4, 2024 |
| Redhat Openshift | — | Upgrade cri-o | Aug 20, 2024 | Jun 5, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | Jun 5, 2024 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade grafana-debugsourceUpgrade grafana-selinuxUpgrade delveUpgrade git-lfs-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade grafana-debuginfoUpgrade git-lfs-debugsourceUpgrade grafanaUpgrade go-toolsetUpgrade git-lfsUpgrade golang | Jul 16, 2024 | Jun 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.2.6Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Universal Forwarder to version 9.4.2Upgrade Splunk Enterprise to version 9.4.2 | Jul 30, 2026 | Jun 5, 2024 |
| Suse | — | Upgrade go1.22-opensslUpgrade go1.21Upgrade go1.21-openssl-raceUpgrade google-osconfig-agentUpgrade go1.22-docUpgrade go1.21-openssl-docUpgrade go1.21-docUpgrade go1.22-openssl-raceUpgrade go1.22-raceUpgrade go1.21-opensslUpgrade container-suseconnectUpgrade go1.22-openssl-docUpgrade go1.22Upgrade go1.21-race | Jun 11, 2024 | Jun 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-srcUpgrade golang-1.21Upgrade golang-1.22Upgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.22-srcUpgrade golang-1.21-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.22-goUpgrade golang-1.18-src (Ubuntu Pro) | Jul 10, 2024 | Jun 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub