golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

🗓️ 24 Mar 2022 10:58:33Reported by RedHatType

Golang flaw: leading zeros in an internet address octet bypasses access controls, risking confidentiality and availability.

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to multiple Go vulnerabilities	14 Oct 202113:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	7 Apr 202219:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Go	1 Oct 202106:19	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-29923)	22 Apr 202218:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Apache, Golang Go, and Linux Kernel affect IBM Spectrum Copy Data Management	10 Dec 202123:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is vulnerable to multiple Go vulnerabilities	15 Oct 202113:05	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	ppc64le	golang-qpid-apache	0:0.32.0-rc1.9.el8ost	golang-qpid-apache-0:0.32.0-rc1.9.el8ost.ppc64le.rpm
Red Hat Enterprise Linux	8	x86_64	golang-qpid-apache	0:0.32.0-rc1.9.el8ost	golang-qpid-apache-0:0.32.0-rc1.9.el8ost.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-29923
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29923
sick	www.sick.codes/sick-2021-016/
cve	www.cve.org/CVERecord

30 Jun 2026 03:18Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.17.5

EPSS0.03775