CVE-2021-31525

SOURCE - github

Summary

golang.org/x/net/http/httpguts in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

EPSS Score⁠: 0.0085 (0.821)

Common Weakness Enumeration (CWE)

SOURCE - nist

CWE-674⁠

Uncontrolled Recursion

SOURCE - github

CWE-674⁠

Uncontrolled Recursion

SOURCE - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-674⁠

Uncontrolled Recursion

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

SOURCE - redhat

CWE-120⁠

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-20⁠

Improper Input Validation

Sources (17)

Impacted images

nist

CREATED

3 years ago

UPDATED

1 year ago

SOURCE IDCVE-2021-31525⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠

CVSS SCORE

5.9medium

github

CREATED

2 years ago

UPDATED

7 months ago

SOURCE IDGHSA-h86h-8ppg-mxmh⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-674⁠

CVSS SCORE

5.9medium

alpine

CREATED

3 years ago

UPDATED

1 month ago

SOURCE IDCVE-2021-31525⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

debian

CREATED

3 years ago

UPDATED

8 months ago

SOURCE IDCVE-2021-31525⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

ubuntu

CREATED

3 years ago

UPDATED

26 days ago

SOURCE IDCVE-2021-31525⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.9low

golang

CREATED

2 years ago

UPDATED

11 months ago

SOURCE IDGO-2022-0236⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

gitlab

CREATED

2 years ago

UPDATED

1 year ago

SOURCE ID

CVE-2021-31525

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-674⁠CWE-937⁠

CVSS SCORE

5.9medium

amazon

CREATED

3 years ago

UPDATED

3 years ago

SOURCE IDALAS-2021-1657⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

amazon

CREATED

3 years ago

UPDATED

3 years ago

SOURCE IDALAS-2021-1512⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

bitnami

CREATED

8 months ago

UPDATED

8 months ago

SOURCE ID

BIT-2021-31525

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

bitnami

CREATED

2 months ago

UPDATED

2 months ago

SOURCE ID

BIT-golang-2021-31525

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

redhat

CREATED

3 years ago

UPDATED

10 months ago

SOURCE IDCVE-2021-31525⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-120⁠CWE-20⁠

CVSS SCORE

5.9medium

rocky

CREATED

3 years ago

UPDATED

10 months ago

SOURCE IDRLSA-2021:3076⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

suse

CREATED

3 years ago

UPDATED

8 months ago

SOURCE IDCVE-2021-31525⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.5medium

oracle

CREATED

3 years ago

UPDATED

3 years ago

SOURCE IDELSA-2021-3076⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

chainguard

CREATED

3 years ago

UPDATED

28 days ago

SOURCE ID

CVE-2021-31525

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

wolfi

CREATED

3 years ago

UPDATED

29 days ago

SOURCE ID

CVE-2021-31525

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE