CVE-2021-44717

🗓️ 01 Jan 2022 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 358 Views

CVE-2021-44717 Go prior to 1.16.12 and 1.17.x prior to 1.17.5 on UNIX allows unintended write operations due to erroneous file descriptor closing

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from expat, Golang Go, gcc, openssl and libxml.	16 May 202206:59	–	ibm
IBM Security Bulletins	Security Bulletin: Flaw in Go may affect DataPower Operator (CVE-2021-44717)	20 Jun 202216:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	21 Mar 202323:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)	12 Mar 202201:27	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management Managed Services	21 Oct 202217:47	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-44716, CVE-2021-44717)	22 Apr 202220:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Operand affected by vulnerabilities in Go (CVE-2021-44716, CVE-2021-44717)	23 May 202219:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go, MinIO, and Python may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift	31 Jan 202219:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	29 Apr 202502:39	–	ibm

NVD

Node

golang goRange<1.16.12

golang goRange1.17.0–1.17.5

AND

opengroup unixMatch-

Node

debian debian_linuxMatch9.0

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/04/msg00021.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00016.html
security	www.security.gentoo.org/glsa/202208-02
groups	www.groups.google.com/g/golang-announce/c/hcmEScgc00k
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00017.html

21 Nov 2024 06:31Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.14.8

CVSS 25.8

EPSS0.01857

CWE-404

cve-2021-44717 go unix write operations file descriptor nvd