golang: net: lookup functions may return invalid host names

A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...

golang: net: lookup functions may return invalid host names

A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...

PT-2021-6523

Name of the Vulnerable Software and Affected Versions Go versions 1.15.x before 1.15.13 Go versions 1.16.x before 1.16.5 Description The issue is related to the DNS lookup functions in the Go programming language, which do not properly validate replies from DNS servers. This can lead to the retur...