En resumen
- CVE-2021-31525 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a golang.org/x/net, stdlib, go (golang).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.7%, mayor que el 89.7% de las vulnerabilidades.
- Solución: actualizar a 0.0.0-20210428140749-89ef3d95e781, 1.16.4, 1.15.12 o posterior.
| Package | Affected versions | Patched versions |
|---|
| golang.org/x/net Go | < 0.0.0-20210428140749-89ef3d95e781
| 0.0.0-20210428140749-89ef3d95e781
|
| stdlib Go | ≥ 1.16.0-0, < 1.16.4< 1.15.12
| 1.16.41.15.12
|
| go | ≥ 1.16.0, < 1.16.4< 1.15.12
| 1.16.41.15.12
|
Description
golang.org/x/net/http/httpguts in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.
NVD description
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.
Más vulnerabilidades de golang.org/x/net
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free