Vulnerabilities > CVE-2021-29923

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

golang

oracle

fedoraproject

NVD

Published: 2021-08-07

Updated: 2023-11-07

Summary

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

Vulnerable Configurations

Part	Description	Count
Application	Golang Golang GO - Golang GO 0.0.0-20201203163018-Be400Aefbc4C Golang GO 1.0 Golang GO 1.0.1 Golang GO 1.0.2 Golang GO 1.0.3 Golang GO 1.1 Golang GO 1.1.1 Golang GO 1.1.2 Golang GO 1.2 Golang GO 1.2.1 Golang GO 1.2.2 Golang GO 1.3 Golang GO 1.3.1 Golang GO 1.3.2 Golang GO 1.3.3 Golang GO 1.4 Golang GO 1.4.1 Golang GO 1.4.2 Golang GO 1.4.3 Golang GO 1.5 Golang GO 1.5.1 Golang GO 1.5.2 Golang GO 1.5.3 Golang GO 1.5.4 Golang GO 1.6 Golang GO 1.6.1 Golang GO 1.6.2 Golang GO 1.6.3 Golang GO 1.6.4 Golang GO 1.7 Golang GO 1.7.1 Golang GO 1.7.2 Golang GO 1.7.3 Golang GO 1.7.4 Golang GO 1.7.5 Golang GO 1.7.6 Golang GO 1.8 Golang GO 1.8.1 Golang GO 1.8.2 Golang GO 1.8.3 Golang GO 1.8.4 Golang GO 1.8.5 Golang GO 1.8.6 Golang GO 1.8.7 Golang GO 1.9 Golang GO 1.9.1 Golang GO 1.9.2 Golang GO 1.9.3 Golang GO 1.9.4 Golang GO 1.9.5 Golang GO 1.9.6 Golang GO 1.9.7 Golang GO 1.10 Golang GO 1.10.1 Golang GO 1.10.2 Golang GO 1.10.3 Golang GO 1.10.4 Golang GO 1.10.5 Golang GO 1.10.6 Golang GO 1.10.7 Golang GO 1.10.8 Golang GO 1.11.0 Golang GO 1.11.1 Golang GO 1.11.2 Golang GO 1.11.3 Golang GO 1.11.4 Golang GO 1.11.5 Golang GO 1.11.6 Golang GO 1.11.7 Golang GO 1.11.8 Golang GO 1.11.9 Golang GO 1.11.10 Golang GO 1.11.11 Golang GO 1.11.12 Golang GO 1.11.13 Golang GO 1.12 Golang GO 1.12.0 Golang GO 1.12.1 Golang GO 1.12.2 Golang GO 1.12.3 Golang GO 1.12.4 Golang GO 1.12.5 Golang GO 1.12.6 Golang GO 1.12.7 Golang GO 1.12.8 Golang GO 1.12.9 Golang GO 1.12.10 Golang GO 1.12.11 Golang GO 1.12.12 Golang GO 1.12.13 Golang GO 1.12.14 Golang GO 1.12.15 Golang GO 1.12.16 Golang GO 1.12.17 Golang GO 1.13 Golang GO 1.13.1 Golang GO 1.13.2 Golang GO 1.13.3 Golang GO 1.13.4 Golang GO 1.13.5 Golang GO 1.13.6 Golang GO 1.13.7 Golang GO 1.13.8 Golang GO 1.13.9 Golang GO 1.13.10 Golang GO 1.13.11 Golang GO 1.13.13 Golang GO 1.13.15 Golang GO 1.14 Golang GO 1.14.0 Golang GO 1.14.1 Golang GO 1.14.2 Golang GO 1.14.3 Golang GO 1.14.5 Golang GO 1.14.7 Golang GO 1.14.8 Golang GO 1.14.12 Golang GO 1.14.14 Golang GO 1.15 Golang GO 1.15.1 Golang GO 1.15.2 Golang GO 1.15.3 Golang GO 1.15.4 Golang GO 1.15.5 Golang GO 1.15.6 Golang GO 1.15.7 Golang GO 1.15.8 Golang GO 1.15.9 Golang GO 1.15.10 Golang GO 1.15.11 Golang GO 1.15.12 Golang GO 1.15.13 Golang GO 1.16.0 Golang GO 1.16.1 Golang GO 1.16.2 Golang GO 1.16.3 Golang GO 1.16.4 Golang GO 1.16.5 Golang GO 1.16.6 Golang GO 1.16.7 Golang GO 1.16.8 Golang GO 1.16.9 Golang GO 1.16.10 Golang GO 1.16.11 Golang GO 1.16.12 Golang GO 1.16.13 Golang GO 1.16.14 Golang GO 1.16.15	216
Application	Oracle Oracle Timesten IN Memory Database - Oracle Timesten IN Memory Database 11.2.2.8.27 Oracle Timesten IN Memory Database 11.2.2.8.49 Oracle Timesten IN Memory Database 18.1.2.1.0 Oracle Timesten IN Memory Database 18.1.3.1.0 Oracle Timesten IN Memory Database 18.1.4.1.0	6
OS	Fedoraproject Fedoraproject Fedora 36	1

Vulnerabilities > CVE-2021-29923

Summary

Vulnerable Configurations

Related news

References

Vulnerabilities > CVE-2021-29923 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-29923"}]}

Summary

Vulnerable Configurations

Related news

References

Vulnerabilities > CVE-2021-29923