CVE-2021-33194

Katalog CVE

CVSS 7.5 · High EPSS 7,5%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada golang go, fedoraproject fedora. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

Rincian

Terbit di NVD

26 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

7,5% peluang dieksploitasi; lebih tinggi dari 94,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/golang/net/commit/37e1c6afe02340126705deced573a85ab75209d7 patch · advisory pihak ketiga
• https://groups.google.com/g/golang-announce/c/wPunbCPkWUg advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4CHKSFMHZVOBC...