Lucene search
GoogleOSV:GO-2021-0239HistoryFeb 17, 2022 - 5:33 p.m.
Improper sanitization when resolving values from DNS in net
2022-02-1717:33:35
Google
osv.dev
24
improper sanitization
dns resolution
html injection
rfc 1035
lookup functions
resolver type
arbitrary values
lookuptxt
The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions and their respective methods on the Resolver type may return arbitrary values retrieved from DNS which do not follow the established RFC 1035 rules for domain names. If these names are used without further sanitization, for instance unsafely included in HTML, they may allow for injection of unexpected content. Note that LookupTXT may still return arbitrary values that could require sanitization before further use.
Related
ibm
ibm
debiancve
debiancve
CVE-2021-33195
2021-08-02 19:15:08
nvd
nvd
CVE-2021-33195
2021-08-02 19:15:08
redhatcve
redhatcve
CVE-2021-33195
2021-08-03 13:28:26
cbl_mariner
cbl_mariner
veracode
veracode
Arbitrary Values
2021-06-05 21:59:57
ubuntucve
ubuntucve
CVE-2021-33195
2021-08-02 00:00:00
alpinelinux
alpinelinux
CVE-2021-33195
2021-08-02 19:15:08
osv
osv
CVE-2021-33195
2021-08-02 19:15:08
BIT-golang-2021-33195
2024-03-06 11:05:14
Moderate: go-toolset:rhel8 security, bug fix, and enhancement update
2021-11-09 08:25:49
cve
cve
CVE-2021-33195
2021-08-02 19:15:08
cvelist
cvelist
CVE-2021-33195
2021-08-02 18:51:34
prion
prion
Format string
2021-08-02 19:15:00
nessus
nessus
RHEL 7 : go-toolset-1.15-golang (RHSA-2021:3431)
2021-09-07 00:00:00
RHEL 7 / 8 : OpenShift Virtualization 2.6.10 RPMs (RHSA-2022:1402)
2024-04-28 00:00:00
Rocky Linux 8 : go-toolset:rhel8 (RLSA-2021:4156)
2023-11-06 00:00:00
redhat
redhat
archlinux
archlinux
[ASA-202106-42] go: multiple issues
2021-06-15 00:00:00
openvas
openvas
openSUSE: Security Advisory for go1.16 (openSUSE-SU-2021:2186-1)
2021-06-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2186-1)
2021-06-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2214-1)
2021-07-01 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2021-05-01 00:00:00
almalinux
almalinux
Moderate: go-toolset:rhel8 security, bug fix, and enhancement update
2021-11-09 08:25:49
Moderate: grafana security, bug fix, and enhancement update
2021-11-09 08:46:47
Moderate: buildah security and bug fix update
2022-11-15 00:00:00
suse
suse
Security update for go1.15 (important)
2021-06-30 00:00:00
Security update for go1.16 (important)
2021-06-28 00:00:00
Security update for go1.15 (important)
2021-07-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.16.5-alt1
2021-06-05 00:00:00
Security fix for the ALT Linux 9 package golang version 1.15.13-alt1
2021-06-07 00:00:00
rocky
rocky
go-toolset:rhel8 security, bug fix, and enhancement update
2021-11-09 08:25:49
grafana security, bug fix, and enhancement update
2021-11-09 08:46:47
oraclelinux
oraclelinux
grafana security, bug fix, and enhancement update
2021-11-16 00:00:00
buildah security and bug fix update
2022-11-22 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0294
2021-09-02 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0294
2021-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2022-0476
2022-03-03 00:00:00
mageia
mageia
Updated golang packages fix security vulnerabilities
2021-07-25 11:34:17
amazon
amazon
Important: golang
2022-07-28 21:55:00
Important: golang
2022-09-15 03:57:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2022-08-04 00:00:00