Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

golang: syscall: don't close fd 0 on ForkExec error

🗓️ 23 Feb 2022 12:47:14Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 3 Views

Golang syscall.ForkExec may close the first descriptor on error, letting attacker exhaust resources.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from expat, Golang Go, gcc, openssl and libxml.
16 May 202206:59
–ibm
IBM Security Bulletins		Security Bulletin: Flaw in Go may affect DataPower Operator (CVE-2021-44717)
20 Jun 202216:18
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities
8 Apr 202220:24
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System
21 Mar 202323:07
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)
12 Mar 202201:27
–ibm
IBM Security Bulletins		Security Bulletin: A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management Managed Services
21 Oct 202217:47
–ibm
IBM Security Bulletins		Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-44716, CVE-2021-44717)
22 Apr 202220:46
–ibm
IBM Security Bulletins		Security Bulletin: IBM DataPower Gateway Operand affected by vulnerabilities in Go (CVE-2021-44716, CVE-2021-44717)
23 May 202219:55
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Golang Go, MinIO, and Python may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift
31 Jan 202219:17
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation
29 Apr 202502:39
–ibm
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux8aarch64butane0.13.1-2.rhaos4.9.el8butane-0.13.1-2.rhaos4.9.el8.aarch64.rpm
Red Hat Enterprise Linux8ppc64lebutane0.13.1-2.rhaos4.9.el8butane-0.13.1-2.rhaos4.9.el8.ppc64le.rpm
Red Hat Enterprise Linux8s390xbutane0.13.1-2.rhaos4.9.el8butane-0.13.1-2.rhaos4.9.el8.s390x.rpm
Red Hat Enterprise Linux8x86_64butane0.13.1-2.rhaos4.9.el8butane-0.13.1-2.rhaos4.9.el8.x86_64.rpm
Red Hat Enterprise Linux8aarch64butane-debuginfo0.13.1-2.rhaos4.9.el8butane-debuginfo-0.13.1-2.rhaos4.9.el8.aarch64.rpm
Red Hat Enterprise Linux8ppc64lebutane-debuginfo0.13.1-2.rhaos4.9.el8butane-debuginfo-0.13.1-2.rhaos4.9.el8.ppc64le.rpm
Red Hat Enterprise Linux8s390xbutane-debuginfo0.13.1-2.rhaos4.9.el8butane-debuginfo-0.13.1-2.rhaos4.9.el8.s390x.rpm
Red Hat Enterprise Linux8x86_64butane-debuginfo0.13.1-2.rhaos4.9.el8butane-debuginfo-0.13.1-2.rhaos4.9.el8.x86_64.rpm
Red Hat Enterprise Linux8aarch64butane-debugsource0.13.1-2.rhaos4.9.el8butane-debugsource-0.13.1-2.rhaos4.9.el8.aarch64.rpm
Red Hat Enterprise Linux8ppc64lebutane-debugsource0.13.1-2.rhaos4.9.el8butane-debugsource-0.13.1-2.rhaos4.9.el8.ppc64le.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
30 Jun 2026 03:18Current
7.1High risk
Vulners AI Score7.1
CVSS 3.14.8
CVSS 25.8
EPSS0.01857
CWE-200
golangsyscallfork executefile descriptorsexhaustionsecurity flawdata integrityconfidentialityunix
3