CVE-2021-33195
Fixed in a distro release EPSS 3%
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
Products: golang go, netapp cloud_insights_telegraf_agent
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | stdlib | 1.15.13 |
| Go | stdlib | 1.16.5 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | delve | 1.6.0-1.module_el8.5.0+2604+960c7771 |
| AlmaLinux 8 | grafana | 7.5.9-4.el8 |
| AlmaLinux 9 | buildah | 1:1.27.0-2.el9 |
| AlmaLinux 9 | buildah-tests | 1:1.27.0-2.el9 |
| Amazon Linux 2 | golang | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-bin | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-docs | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-misc | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-race | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-shared | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-src | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-tests | 1.16.15-1.amzn2.0.1 |
| Arch Linux | go | 2:1.16.5-1 |
| Debian 11 | golang-1.15 | 1.15.9-5 |
| Red Hat container native virtualization 2.6 | kubevirt | 0:2.6.10-230.el7 |
| Red Hat container native virtualization 2.6 | kubevirt | 0:2.6.10-230.el8 |
| Red Hat container native virtualization 2.6 | kubevirt-virtctl | 0:2.6.10-230.el8 |
| Red Hat container native virtualization 2.6 | kubevirt-virtctl | 0:2.6.10-230.el7 |
| Red Hat container native virtualization 2.6 | kubevirt-virtctl-redistributable | 0:2.6.10-230.el7 |
| Red Hat container native virtualization 2.6 | kubevirt-virtctl-redistributable | 0:2.6.10-230.el8 |
| Red Hat container native virtualization 4.8 | kubevirt | 0:4.8.5-278.el7 |
| Red Hat container native virtualization 4.8 | kubevirt | 0:4.8.5-278.el8 |
| Red Hat container native virtualization 4.8 | kubevirt-virtctl | 0:4.8.5-278.el8 |
| Red Hat container native virtualization 4.8 | kubevirt-virtctl | 0:4.8.5-278.el7 |
| Red Hat container native virtualization 4.8 | kubevirt-virtctl-redistributable | 0:4.8.5-278.el7 |
| Red Hat container native virtualization 4.8 | kubevirt-virtctl-redistributable | 0:4.8.5-278.el8 |
| Red Hat devtools 2021 | go-toolset-1.15-golang | 0:1.15.14-2.el7_9 |
| Red Hat devtools 2021 | go-toolset-1.15-golang-bin | 0:1.15.14-2.el7_9 |
| Red Hat devtools 2021 | go-toolset-1.15-golang-docs | 0:1.15.14-2.el7_9 |
| Red Hat devtools 2021 | go-toolset-1.15-golang-misc | 0:1.15.14-2.el7_9 |
| Red Hat devtools 2021 | go-toolset-1.15-golang-race | 0:1.15.14-2.el7_9 |
| Red Hat devtools 2021 | go-toolset-1.15-golang-src | 0:1.15.14-2.el7_9 |
| Red Hat devtools 2021 | go-toolset-1.15-golang-tests | 0:1.15.14-2.el7_9 |
| Red Hat Enterprise Linux 8 | delve | 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0 |
| Red Hat Enterprise Linux 8 | delve-debuginfo | 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0 |
| Red Hat Enterprise Linux 8 | delve-debugsource | 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0 |
| Red Hat Enterprise Linux 8 | go-toolset | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-bin | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-docs | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-misc | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-race | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-src | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-tests | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | grafana | 0:7.5.9-4.el8 |
| Red Hat Enterprise Linux 8 | grafana-debuginfo | 0:7.5.9-4.el8 |
| Red Hat Enterprise Linux 9 | buildah | 1:1.27.0-2.el9 |
| Red Hat Enterprise Linux 9 | buildah-debuginfo | 1:1.27.0-2.el9 |
| Red Hat Enterprise Linux 9 | buildah-debugsource | 1:1.27.0-2.el9 |
| Red Hat Enterprise Linux 9 | buildah-tests | 1:1.27.0-2.el9 |
| Red Hat Enterprise Linux 9 | buildah-tests-debuginfo | 1:1.27.0-2.el9 |
| Red Hat openshift 4.6 | ignition | 0:2.6.0-8.rhaos4.6.git947598e.el8 |
| Red Hat openshift 4.6 | ignition-debuginfo | 0:2.6.0-8.rhaos4.6.git947598e.el8 |
| Red Hat openshift 4.6 | ignition-debugsource | 0:2.6.0-8.rhaos4.6.git947598e.el8 |
| Red Hat openshift 4.6 | ignition-validate | 0:2.6.0-8.rhaos4.6.git947598e.el8 |
| Red Hat openshift 4.6 | ignition-validate-debuginfo | 0:2.6.0-8.rhaos4.6.git947598e.el8 |
| Red Hat openshift 4.7 | atomic-openshift-service-idler | 0:4.7.0-202107291238.p0.git.39cfc66.assembly.stream.el8 |
| Red Hat openshift 4.7 | cri-o | 0:1.20.4-7.rhaos4.7.git6287500.el7 |
| Red Hat openshift 4.7 | cri-o | 0:1.20.4-7.rhaos4.7.git6287500.el8 |
| Red Hat openshift 4.7 | cri-o-debuginfo | 0:1.20.4-7.rhaos4.7.git6287500.el7 |
| Red Hat openshift 4.7 | cri-o-debuginfo | 0:1.20.4-7.rhaos4.7.git6287500.el8 |
| Red Hat openshift 4.7 | cri-o-debugsource | 0:1.20.4-7.rhaos4.7.git6287500.el8 |
| Red Hat openshift 4.7 | ignition | 0:2.9.0-4.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-debuginfo | 0:2.9.0-4.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-debugsource | 0:2.9.0-4.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-validate | 0:2.9.0-4.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | ignition-validate-debuginfo | 0:2.9.0-4.rhaos4.7.git1d56dc8.el8 |
| Red Hat openshift 4.7 | openshift | 0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el8 |
| Red Hat openshift 4.7 | openshift | 0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el7 |
| Red Hat openshift 4.7 | openshift-clients | 0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el7 |
| Red Hat openshift 4.7 | openshift-clients | 0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el8 |
| Red Hat openshift 4.7 | openshift-clients-redistributable | 0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el8 |
| Red Hat openshift 4.7 | openshift-clients-redistributable | 0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el7 |
| Red Hat openshift 4.7 | openshift-hyperkube | 0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el8 |
| Red Hat openshift 4.7 | openshift-hyperkube | 0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el7 |
| Red Hat openshift 4.7 | redhat-release-coreos | 0:47.84-1.el8 |
| Red Hat openshift 4.8 | butane | 0:0.12.1-2.rhaos4.8.el8 |
| Red Hat openshift 4.8 | butane-debuginfo | 0:0.12.1-2.rhaos4.8.el8 |
| Red Hat openshift 4.8 | containernetworking-plugins | 0:0.8.6-3.rhaos4.6.el7 |
| Red Hat openshift 4.8 | containernetworking-plugins-debuginfo | 0:0.8.6-3.rhaos4.6.el7 |
| Red Hat openshift 4.8 | cri-o | 0:1.21.2-8.rhaos4.8.git8d4264e.el8 |
| Red Hat openshift 4.8 | cri-o | 0:1.21.2-8.rhaos4.8.git8d4264e.el7 |
| Red Hat openshift 4.8 | cri-o-debuginfo | 0:1.21.2-8.rhaos4.8.git8d4264e.el7 |
| Red Hat openshift 4.8 | cri-o-debuginfo | 0:1.21.2-8.rhaos4.8.git8d4264e.el8 |
| Red Hat openshift 4.8 | cri-o-debugsource | 0:1.21.2-8.rhaos4.8.git8d4264e.el8 |
| Red Hat openshift 4.8 | cri-tools | 0:1.21.0-3.el8 |
| Red Hat openshift 4.8 | cri-tools-debuginfo | 0:1.21.0-3.el8 |
| Red Hat openshift 4.8 | cri-tools-debugsource | 0:1.21.0-3.el8 |
| Red Hat openshift 4.8 | golang-github-prometheus-promu | 0:0.5.0-4.git642a960.el8 |
| Red Hat openshift 4.8 | ignition | 0:2.9.0-7.rhaos4.8.el8 |
| Red Hat openshift 4.8 | ignition-debuginfo | 0:2.9.0-7.rhaos4.8.el8 |
| Red Hat openshift 4.8 | ignition-debugsource | 0:2.9.0-7.rhaos4.8.el8 |
| Red Hat openshift 4.8 | ignition-validate | 0:2.9.0-7.rhaos4.8.el8 |
| Red Hat openshift 4.8 | ignition-validate-debuginfo | 0:2.9.0-7.rhaos4.8.el8 |
| Red Hat openshift 4.8 | jenkins | 0:2.289.3.1633554819-1.el8 |
| Red Hat openshift 4.8 | openshift | 0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el8 |
| Red Hat openshift 4.8 | openshift | 0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el7 |
| Red Hat openshift 4.8 | openshift-clients | 0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el7 |
| Red Hat openshift 4.8 | openshift-clients | 0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el8 |
| Red Hat openshift 4.8 | openshift-clients-redistributable | 0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el8 |
| Red Hat openshift 4.8 | openshift-clients-redistributable | 0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el7 |
| Red Hat openshift 4.8 | openshift-hyperkube | 0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el7 |
| Red Hat openshift 4.8 | openshift-hyperkube | 0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el8 |
| Red Hat openshift 4.8 | prometheus-promu | 0:0.5.0-4.git642a960.el8 |
| Red Hat openshift data foundation 4.9 | mcg | 0:5.9.0-28.61dcf87.5.9.el8 |
| Red Hat openstack 16.1 | etcd | 0:3.3.23-3.1.el8ost.1 |
| Red Hat openstack 16.1 | etcd-debuginfo | 0:3.3.23-3.1.el8ost.1 |
| Red Hat openstack 16.1 | etcd-debugsource | 0:3.3.23-3.1.el8ost.1 |
| Red Hat openstack 16.2 | etcd | 0:3.3.23-3.1.el8ost.1 |
| Red Hat openstack 16.2 | etcd-debuginfo | 0:3.3.23-3.1.el8ost.1 |
| Red Hat openstack 16.2 | etcd-debugsource | 0:3.3.23-3.1.el8ost.1 |
| Red Hat serverless 1.0 | openshift-serverless-clients | 0:0.23.2-1.el8 |
| Rocky Linux 8 | delve | 0:1.6.0-1.module+el8.5.0+694+f77f0bfd |
| Rocky Linux 8 | go-toolset | 0:1.16.7-1.module+el8.5.0+694+f77f0bfd |
| Rocky Linux 8 | golang | 0:1.16.7-1.module+el8.5.0+694+f77f0bfd |
| Rocky Linux 8 | grafana | 0:7.5.9-4.el8 |
| SUSE Enterprise Storage 6 | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | go1.16 | 1.16.5-1.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | go1.16 | 1.16.5-1.17.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | go1.15 | 1.15.13-1.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | go1.15 | 1.15.13-1.33.1 |
| SUSE Manager Proxy 4.0 | go1.15 | 1.15.13-1.33.1 |
| SUSE Manager Retail Branch Server 4.0 | go1.15 | 1.15.13-1.33.1 |
| SUSE Manager Server 4.0 | go1.15 | 1.15.13-1.33.1 |
| Ubuntu 18.04 LTS | golang-1.8 | no fix |
| Ubuntu Pro 18.04 LTS | golang-1.16 | no fix |
| Ubuntu Pro 20.04 LTS | golang-1.16 | no fix |
| openSUSE Leap 15.2 | go1.15 | 1.15.13-lp152.20.1 |
| openSUSE Leap 15.3 | go1.15 | 1.15.13-1.33.1 |
| openSUSE Leap 15.3 | go1.16 | 1.16.5-1.17.1 |
| openSUSE Tumbleweed | go1.15 | 1.15.15-1.2 |
| openSUSE Tumbleweed | go1.16 | 1.16.8-1.1 |