Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] - GO-2024-2887 Vulnerability in net/netip Package #15

Closed
DarkRockMountain-admin opened this issue Jun 6, 2024 · 1 comment · Fixed by #16
Closed

[BUG] - GO-2024-2887 Vulnerability in net/netip Package #15

DarkRockMountain-admin opened this issue Jun 6, 2024 · 1 comment · Fixed by #16
Assignees
Labels
bug Something isn't working security Issues related to improving security.

Comments

@DarkRockMountain-admin
Copy link
Collaborator

Describe the bug
A vulnerability (GO-2024-2887) was detected in the net/netip package of Go version 1.22.3. This causes unexpected behavior when using Is methods for IPv4-mapped IPv6 addresses.

To Reproduce
Steps to reproduce the behavior:

  1. Use the net/netip package with Go version 1.22.3.
  2. Call the IsLoopback or IsMulticast methods on an IPv4-mapped IPv6 address.
  3. Observe the unexpected behavior.

Expected behavior
The methods should handle IPv4-mapped IPv6 addresses correctly without causing unexpected behavior.

Screenshots
N/A

Desktop (please complete the following information):

  • OS: Ubuntu 22.04
  • Browser: N/A
  • Version: Go 1.22.3

Smartphone (please complete the following information):
N/A

Additional context
This issue is resolved in Go version 1.22.4. Updating to this version will fix the vulnerability.

Copy link

github-actions bot commented Jul 7, 2024

This issue is stale because it has been open for 30 days with no activity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working security Issues related to improving security.
Projects
None yet
2 participants