CVE-2021-41771 — Improper Restriction of Operations within the Bounds of a Memory Buffer in GO
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 8
Latest updateMay 24
Description
ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages1 packages
Also affects: Debian Linux 9.0, Fedora 34, 35
🔴Vulnerability Details
4GHSA
▶
CVEList
▶
📋Vendor Advisories
3Microsoft▶
ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer aka an out-of-bounds slice situation.↗2021-11-09
Debian▶
CVE-2021-41771: golang-1.15 - ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1....↗2021