[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8WoEdKRc4Rzwivf-aw64kFtFI_dYxwehIavccz2Tcwo":3,"g5a-risk:CVE-2021-29923":157},{"success":4,"data":5,"meta":155},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":57,"references":58,"referencesCount":98,"weaknesses":99,"weaknessesCount":103,"isActivelyExploited":104,"cisaInfo":26,"otxData":26,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":153,"notableEvents":154},"CVE-2021-29923","What is CVE-2021-29923?","Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.","Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to ...","2021-08-07T17:15:07.067","2023-11-07T03:32:45.383",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.03744,[39,39,39,39,39,39,39],"High",[43,48,52],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"golang","go","*","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":46,"criteria":51,"vulnerable":4},"oracle","timesten_in-memory_database","cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"fedoraproject","fedora","36","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",3,[59,64,70,73,76,81,86,90,94],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fdefcon.org\u002Fhtml\u002Fdefcon-29\u002Fdc-29-speakers.html#kaoudis","Defcon",[63],"Third Party Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fgo\u002Fissues\u002F30999","GitHub",[68,69,63],"Exploit","Issue Tracking",{"url":71,"source":66,"tags":72},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fgo\u002Fissues\u002F43389",[69,63],{"url":74,"source":66,"tags":75},"https:\u002F\u002Fgithub.com\u002Fsickcodes\u002Fsecurity\u002Fblob\u002Fmaster\u002Fadvisories\u002FSICK-2021-016.md",[68,63],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fgo-review.googlesource.com\u002Fc\u002Fgo\u002F+\u002F325829\u002F","Googlesource",[80,63],"Patch",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fgolang.org\u002Fpkg\u002Fnet\u002F#ParseCIDR","Golang",[85],"Vendor Advisory",{"url":87,"source":88,"tags":89},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F4CHKSFMHZVOBCZSSVRE3UEYNKARTBMTM\u002F","Fedoraproject",[],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202208-02","Gentoo",[63],{"url":95,"source":96,"tags":97},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html","Oracle",[80,63],9,[100],{"id":101,"name":101,"description":102},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2021-29923? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-29923, a high severity cyber security vulnerability from 2021. Go before 1.17 does not properly consider extraneous zero c...","CVE-2021-29923, CVE-2021-29923 vulnerability, CVE-2021-29923 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, golang security, oracle security, fedoraproject security, go vulnerability, timesten_in-memory_database vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2021-29923",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":10,"dateModified":11,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-29923","Cybersecurity","CVE-2021-29923, CVE-2021-29923 vulnerability, CVE-2021-29923 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132,140,147],{"Operator":26,"Negate":26,"Nodes":133},[134],{"Operator":135,"Negate":26,"CPEMatch":136},"OR",[137],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":139,"VersionEndIncluding":26},"D39D5C21-8281-429F-AC33-CE39821CA3EC","1.17",{"Operator":26,"Negate":26,"Nodes":141},[142],{"Operator":135,"Negate":26,"CPEMatch":143},[144],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":146,"VersionEndIncluding":26},"20290BBC-E3C9-4B96-94FE-2DFADD4BF1F1","21.1.1.1.0",{"Operator":26,"Negate":26,"Nodes":148},[149],{"Operator":135,"Negate":26,"CPEMatch":150},[151],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",[],[],{"lastModified":11,"cacheTime":156,"version":32},1792247126640,{"score":158,"band":159,"action":160,"scoredAt":161},51,"Medium","Plan remediation","2026-10-16T06:51:45.270237+00:00"]