CVE-2021-33195

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an…

published August 2, 2021

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03204 · 88.1th percentile
Published
2021-08-02T18:51Z
EPSS history
Timeline
  • 02 AUG 18:51Z
    Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an…
    cvelistv5