Lucene search
Veracode Vulnerability DatabaseVERACODE:31547HistoryAug 10, 2021 - 6:24 a.m.
Privilege Escalation
2021-08-1006:24:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
go
privilege escalation
access control vulnerability
ip addresses
EPSS
0.002
Percentile
61.1%
go is vulnerable to privilege escalation. The vulnerability exists due to a bypass access control that is based on IP addresses that when there are extra zero characters at the beginning of an IP address octet.
References
defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis
github.com/golang/go/issues/30999
github.com/golang/go/issues/43389
github.com/sickcodes/security/blob/master/advisories/SICK-2021-016.md
go-review.googlesource.com/c/go/+/325829/
golang.org/pkg/net/#ParseCIDR
lists.fedoraproject.org/archives/list/[email protected]/message/4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM/
security.gentoo.org/glsa/202208-02
www.oracle.com/security-alerts/cpujan2022.html
Related
redhat
redhat
osv
osv
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
CVE-2021-29923
2021-08-07 17:15:07
BIT-golang-2021-29923
2024-03-06 11:06:07
almalinux
almalinux
Moderate: go-toolset:rhel8 security update
2021-09-21 07:12:48
cbl_mariner
cbl_mariner
CVE-2021-29923 affecting package golang 1.16.15-2
2021-09-09 15:03:05
cve
cve
CVE-2021-29923
2021-08-07 17:15:07
ibm
ibm
debiancve
debiancve
CVE-2021-29923
2021-08-07 17:15:07
nessus
nessus
Oracle Linux 8 : go-toolset:ol8 (ELSA-2021-3585)
2021-09-22 00:00:00
rocky
rocky
go-toolset:rhel8 security update
2021-09-21 07:12:48
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2633)
2021-11-03 00:00:00
Fedora: Security Advisory for golang (FEDORA-2022-17d004ed71)
2022-03-27 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-1007)
2022-01-28 00:00:00
redhatcve
redhatcve
CVE-2021-29923
2022-05-07 13:54:34
oraclelinux
oraclelinux
go-toolset:ol8 security update
2021-09-22 00:00:00
ubuntucve
ubuntucve
CVE-2021-29923
2021-08-07 00:00:00
nvd
nvd
CVE-2021-29923
2021-08-07 17:15:07
cvelist
cvelist
CVE-2021-29923
2021-08-07 16:38:59
alpinelinux
alpinelinux
CVE-2021-29923
2021-08-07 17:15:07
prion
prion
Improper access control
2021-08-07 17:15:00
fedora
fedora
[SECURITY] Fedora 36 Update: golang-1.18~rc1-2.fc36
2022-03-26 15:47:46
photon
photon
Important Photon OS Security Update - PHSA-2021-0294
2021-09-02 00:00:00
Critical Photon OS Security Update - PHSA-2021-0130
2021-11-29 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0294
2021-09-02 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2022-08-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00