golang go CVE-2021-41772 vulnerability in GoLang and Other Products
Published on November 8, 2021

product logo product logo product logo
Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.

Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2021-41772

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-41772 are published in these products:

GoLang Go
 
Fedora Project Fedora
 
Oracle Timesten In Memory Database
 

Exploit Probability

EPSS
0.06%
Percentile
19.78%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.