CVE-2021-33196
02.08.2021, 19:15
In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | 𝑥 < 1.15.13 |
| golang | go | 1.16.0 ≤ 𝑥 < 1.16.5 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-1.11 |
| ||||||||||||||||||||||||
| golang-1.15 |
| ||||||||||||||||||||||||
| golang-1.16 |
| ||||||||||||||||||||||||
| golang-1.7 |
| ||||||||||||||||||||||||
| golang-1.8 |
|
Amazon Linux Releases
Amazon Package | |||||||
|---|---|---|---|---|---|---|---|
| golang |
| ||||||
| golang-bin |
| ||||||
| golang-docs |
| ||||||
| golang-misc |
| ||||||
| golang-race |
| ||||||
| golang-shared |
| ||||||
| golang-src |
| ||||||
| golang-tests |
|
Common Weakness Enumeration
References