CVE catalog

CVE-2021-33195

UBUNTU-CVE-2021-33195

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.20% · Oct 25, 2026

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-1.15111.15.9-5fixed
Susego1.16linux enterprise module for development tools 15 sp21.16.5-1.17.1fixed
Susego1.16linux enterprise module for development tools 15 sp31.16.5-1.17.1fixed
Susego1.15linux enterprise module for development tools 15 sp21.15.13-1.33.1fixed
Susego1.15linux enterprise module for development tools 15 sp31.15.13-1.33.1fixed
Susego1.15linux enterprise high performance computing 15 sp1-espos1.15.13-1.33.1fixed
Susego1.15linux enterprise high performance computing 15 sp1-ltss1.15.13-1.33.1fixed
Susego1.15linux enterprise server 15 sp1-bcl1.15.13-1.33.1fixed
Susego1.15linux enterprise server 15 sp1-ltss1.15.13-1.33.1fixed
Susego1.15linux enterprise server for sap applications 15 sp11.15.13-1.33.1fixed
Susego1.15manager proxy 4.01.15.13-1.33.1fixed
Susego1.15manager retail branch server 4.01.15.13-1.33.1fixed
Susego1.15manager server 4.01.15.13-1.33.1fixed
Susego1.15enterprise storage 61.15.13-1.33.1fixed
Opensusego1.15leap 15.31.15.13-1.33.1fixed
Opensusego1.16leap 15.31.16.5-1.17.1fixed
Opensusego1.15leap 15.21.15.13-lp152.20.1fixed
Ubuntugolang-1.16pro1.16.2-0ubuntu1~20.04vulnerable
Ubuntugolang-1.16pro1.16.2-0ubuntu1~20.04.1vulnerable
Ubuntugolang-1.16pro1.16.2-0ubuntu1~20.04.1+esm1vulnerable
Ubuntugolang-1.818.041.8.3-2ubuntu1vulnerable
Ubuntugolang-1.818.041.8.3-2ubuntu1.18.04.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-1.15deb111.15.9-5Not reportedDEBIAN-CVE-2021-33195Not reported
Susego1.16rpmlinux enterprise module for development tools 15 sp21.16.5-1.17.1Not reportedSUSE-SU-2021:2186-1Not reported
Susego1.16rpmlinux enterprise module for development tools 15 sp31.16.5-1.17.1Not reportedSUSE-SU-2021:2186-1Not reported
Susego1.15rpmlinux enterprise module for development tools 15 sp21.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmlinux enterprise module for development tools 15 sp31.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmlinux enterprise high performance computing 15 sp1-espos1.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmlinux enterprise high performance computing 15 sp1-ltss1.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmlinux enterprise server 15 sp1-bcl1.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmlinux enterprise server 15 sp1-ltss1.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmlinux enterprise server for sap applications 15 sp11.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmmanager proxy 4.01.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmmanager retail branch server 4.01.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmmanager server 4.01.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Susego1.15rpmenterprise storage 61.15.13-1.33.1Not reportedSUSE-SU-2021:2214-1Not reported
Opensusego1.15rpmleap 15.31.15.13-1.33.1Not reportedOPENSUSE-SU-2021:2214-1Not reported
Opensusego1.16rpmleap 15.31.16.5-1.17.1Not reportedOPENSUSE-SU-2021:2186-1Not reported
Opensusego1.15rpmleap 15.21.15.13-lp152.20.1Not reportedOPENSUSE-SU-2021:0950-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]