CVE-2021-44717

Name
CVE-2021-44717
Description
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
CONFIRM https://groups.google.com/g/golang-announce/c/hcmEScgc00k
Mailing List https://lists.debian.org/debian-lts-announce/2022/01/msg00017.html
Mailing List https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html

Match rules

CPE URI Source package Min version Max version

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
nomad edge-community 1.2.6-r0 Matthias Neugebauer <mtneug@mailbox.org> fixed
nomad 3.18-community 1.2.6-r0 None fixed
nomad 3.17-community 1.2.6-r0 None fixed
go edge-community 1.17.6-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
go 3.22-community 1.17.6-r0 None fixed
go 3.21-community 1.17.6-r0 None fixed
go 3.20-community 1.17.6-r0 None fixed
go 3.19-community 1.17.6-r0 None fixed
go 3.18-community 1.17.6-r0 None fixed
go 3.17-community 1.17.6-r0 None fixed