Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-GOLANG-2021-29923
HistoryMar 06, 2024 - 11:06 a.m.

BIT-golang-2021-29923

2024-03-0611:06:07
Google
osv.dev
10
golang
vulnerability
access control
ip address
net.parseip
net.parsecidr

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

Related

cbl_mariner 2
debiancve 1
ibm 20
cve 1
osv 2
nessus 28
redhat 23
ubuntucve 1
almalinux 1
rocky 1
oraclelinux 1
openvas 5
redhatcve 1
prion 1
alpinelinux 1
cvelist 1
veracode 1
nvd 1
fedora 1
photon 6
gentoo 1
oracle 1
cbl_mariner
cbl_mariner
CVE-2021-29923 affecting package golang 1.16.15-2
2021-09-09 15:03:05
CVE-2021-29923 affecting package python-tensorboard for versions less than 2.16.2-2
2024-07-24 01:44:36
debiancve
debiancve
CVE-2021-29923
2021-08-07 17:15:07
ibm
ibm
Security Bulletin: A vulnerability in Golang Go affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-29923)
2023-01-12 21:59:00
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-29923)
2022-04-22 18:50:57
Security Bulletin: IBM App Connect Enterprise Certified Container Integration Servers may be vulnerable to bypassing of access control based on IP addresses due to CVE-2021-29923
2021-10-20 10:09:43
cve
cve
CVE-2021-29923
2021-08-07 17:15:07
osv
osv
CVE-2021-29923
2021-08-07 17:15:07
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
nessus
nessus
CentOS 8 : go-toolset:rhel8 (CESA-2021:3585)
2021-09-21 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1 (golang-qpid-apache) (RHSA-2022:0989)
2022-03-25 00:00:00
RHEL 7 / 8 : OpenShift Virtualization 4.8.3 RPMs (RHSA-2021:4910)
2024-04-28 00:00:00
redhat
redhat
(RHSA-2021:4910) Moderate: OpenShift Virtualization 4.8.3 RPMs security and bug fix update
2021-12-02 14:15:54
(RHSA-2022:0997) Moderate: Red Hat OpenStack Platform 16.2 (golang-qpid-apache) security update
2022-03-23 20:19:31
(RHSA-2022:0989) Moderate: Red Hat OpenStack Platform 16.1 (golang-qpid-apache) security update
2022-03-24 09:39:05
ubuntucve
ubuntucve
CVE-2021-29923
2021-08-07 00:00:00
almalinux
almalinux
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
rocky
rocky
go-toolset:rhel8 security update
2021-09-21 07:12:48
oraclelinux
oraclelinux
go-toolset:ol8 security update
2021-09-22 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2633)
2021-11-03 00:00:00
Fedora: Security Advisory for golang (FEDORA-2022-17d004ed71)
2022-03-27 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-1007)
2022-01-28 00:00:00
redhatcve
redhatcve
CVE-2021-29923
2022-05-07 13:54:34
prion
prion
Improper access control
2021-08-07 17:15:00
alpinelinux
alpinelinux
CVE-2021-29923
2021-08-07 17:15:07
cvelist
cvelist
CVE-2021-29923
2021-08-07 16:38:59
veracode
veracode
Privilege Escalation
2021-08-10 06:24:31
nvd
nvd
CVE-2021-29923
2021-08-07 17:15:07
fedora
fedora
[SECURITY] Fedora 36 Update: golang-1.18~rc1-2.fc36
2022-03-26 15:47:46
photon
photon
Important Photon OS Security Update - PHSA-2021-0294
2021-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2021-0130
2021-11-29 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0294
2021-09-02 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2022-08-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON
Related for OSV:BIT-GOLANG-2021-29923
cbl_mariner2debiancve1ibm20cve1osv2nessus28redhat23ubuntucve1almalinux1rocky1oraclelinux1openvas5redhatcve1prion1alpinelinux1cvelist1veracode1nvd1fedora1photon6gentoo1oracle1