Google Golang 资源管理错误漏洞

🗓️ 09 Dec 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

A vulnerability in Golang occurs when syscall fails to close file descriptor zero after ForkExec error.

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from expat, Golang Go, gcc, openssl and libxml.	16 May 202206:59	–	ibm
IBM Security Bulletins	Security Bulletin: Flaw in Go may affect DataPower Operator (CVE-2021-44717)	20 Jun 202216:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	21 Mar 202323:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)	12 Mar 202201:27	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management Managed Services	21 Oct 202217:47	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-44716, CVE-2021-44717)	22 Apr 202220:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Operand affected by vulnerabilities in Go (CVE-2021-44716, CVE-2021-44717)	23 May 202219:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go, MinIO, and Python may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift	31 Jan 202219:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	29 Apr 202502:39	–	ibm

Source	Link
security	www.security.gentoo.org/glsa/202208-02
groups	www.groups.google.com/g/golang-announce/c/hcmEScgc00k
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00017.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00021.html
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00016.html
auscert	www.auscert.org.au/bulletins/ESB-2022.1673
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022031628
auscert	www.auscert.org.au/bulletins/ESB-2022.1273
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022072210

23 May 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.14.8

CVSS 25.8

EPSS0.0022

Golang resource management file descriptor zero fork exec error syscall vulnerability