Lucene search
Veracode Vulnerability DatabaseVERACODE:31547HistoryAug 10, 2021 - 6:24 a.m.
Privilege Escalation
2021-08-1006:24:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.002 Low
EPSS
Percentile
61.2%
go is vulnerable to privilege escalation. The vulnerability exists due to a bypass access control that is based on IP addresses that when there are extra zero characters at the beginning of an IP address octet.
References
defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis
github.com/golang/go/issues/30999
github.com/golang/go/issues/43389
github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md
go-review.googlesource.com/c/go/+/325829/
golang.org/pkg/net/#ParseCIDR
lists.fedoraproject.org/archives/list/[email protected]/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/
security.gentoo.org/glsa/202208-02
www.oracle.com/security-alerts/cpujan2022.html
Related
debiancve
debiancve
CVE-2021-29923
2021-08-07 17:15:07
cbl_mariner
cbl_mariner
CVE-2021-29923 affecting package golang 1.16.15-2
2021-09-09 15:03:05
cve
cve
CVE-2021-29923
2021-08-07 17:15:07
ibm
ibm
redhat
redhat
(RHSA-2021:4910) Moderate: OpenShift Virtualization 4.8.3 RPMs security and bug fix update
2021-12-02 14:15:54
(RHSA-2022:0997) Moderate: Red Hat OpenStack Platform 16.2 (golang-qpid-apache) security update
2022-03-23 20:19:31
(RHSA-2021:3585) Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
nessus
nessus
EulerOS 2.0 SP8 : golang (EulerOS-SA-2021-2633)
2021-11-02 00:00:00
RHEL 7 / 8 : OpenShift Virtualization 4.8.3 RPMs (RHSA-2021:4910)
2024-04-28 00:00:00
osv
osv
CVE-2021-29923
2021-08-07 17:15:07
BIT-golang-2021-29923
2024-03-06 11:06:07
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
ubuntucve
ubuntucve
CVE-2021-29923
2021-08-07 00:00:00
redhatcve
redhatcve
CVE-2021-29923
2022-05-07 13:54:34
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2633)
2021-11-03 00:00:00
Fedora: Security Advisory for golang (FEDORA-2022-17d004ed71)
2022-03-27 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-1027)
2022-01-28 00:00:00
rocky
rocky
go-toolset:rhel8 security update
2021-09-21 07:12:48
oraclelinux
oraclelinux
go-toolset:ol8 security update
2021-09-22 00:00:00
almalinux
almalinux
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
cvelist
cvelist
CVE-2021-29923
2021-08-07 16:38:59
prion
prion
Improper access control
2021-08-07 17:15:00
nvd
nvd
CVE-2021-29923
2021-08-07 17:15:07
alpinelinux
alpinelinux
CVE-2021-29923
2021-08-07 17:15:07
fedora
fedora
[SECURITY] Fedora 36 Update: golang-1.18~rc1-2.fc36
2022-03-26 15:47:46
photon
photon
Important Photon OS Security Update - PHSA-2021-0294
2021-09-02 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0294
2021-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2021-0130
2021-11-29 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2022-08-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00