p PatchFirst

CVE-2021-33196

CVE-2021-33196

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.

CVSS 7.5 · High · EPSS 3.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • golang-1.15 Debian:11

    Affected ranges
    • ECOSYSTEM: < 1.15.9-4

    Update to 1.15.9-4

  • golang-1.16 Ubuntu:Pro:18.04:LTS

    Versions
    • 1.16.2-0ubuntu1~18.04.2
    • 1.16.2-0ubuntu1~18.04.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-1.8 Ubuntu:18.04:LTS

    Versions
    • 1.8.3-2ubuntu1
    • 1.8.3-2ubuntu1.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-1.16 Ubuntu:Pro:20.04:LTS

    Versions
    • 1.16.2-0ubuntu1~20.04
    • 1.16.2-0ubuntu1~20.04.1
    • 1.16.2-0ubuntu1~20.04.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →