UBUNTU-CVE-2021-33194
- Source
- https://ubuntu.com/security/CVE-2021-33194
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-33194.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-33194
- Upstream
- Downstream
- Related
- Published
- 2021-05-26T15:15:00Z
- Modified
- 2026-04-08T13:45:02.235526187Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.
- References
-
- https://ubuntu.com/security/CVE-2021-33194
- https://groups.google.com/g/golang-dev/c/28x0nthP-c8/m/KqWVTjsnBAAJ
- https://groups.google.com/g/golang-announce/c/wPunbCPkWUg
- https://www.cve.org/CVERecord?id=CVE-2021-33194
- https://ubuntu.com/security/notices/USN-8089-2
- https://ubuntu.com/security/notices/USN-8089-3
Affected packages
Ubuntu:Pro:18.04:LTS / lxd
Package
- Name
- lxd
- Purl
- pkg:deb/ubuntu/lxd@3.0.3-0ubuntu1~18.04.2+esm2?arch=source&distro=esm-infra/bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.0.3-0ubuntu1~18.04.2+esm2
Affected versions
2.*
2.18-0ubuntu6
2.19-0ubuntu1
2.20-0ubuntu3
2.20-0ubuntu4
2.21-0ubuntu1
2.21-0ubuntu2
2.21-0ubuntu3
2.21-0ubuntu4
3.*
3.0.0~beta2-0ubuntu3
3.0.0~beta3-0ubuntu3
3.0.0~beta5-0ubuntu2
3.0.0~beta7-0ubuntu1
3.0.0-0ubuntu1
3.0.0-0ubuntu2
3.0.0-0ubuntu3
3.0.0-0ubuntu4
3.0.1-0ubuntu1~18.04.1
3.0.2-0ubuntu1~18.04.1
3.0.3-0ubuntu1~18.04.1
3.0.3-0ubuntu1~18.04.2
3.0.3-0ubuntu1~18.04.2+esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "lxd",
"binary_version": "3.0.3-0ubuntu1~18.04.2+esm2"
},
{
"binary_name": "lxd-client",
"binary_version": "3.0.3-0ubuntu1~18.04.2+esm2"
},
{
"binary_name": "lxd-tools",
"binary_version": "3.0.3-0ubuntu1~18.04.2+esm2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
Ubuntu:Pro:20.04:LTS / golang-golang-x-net-dev
Package
- Name
- golang-golang-x-net-dev
- Purl
- pkg:deb/ubuntu/golang-golang-x-net-dev@1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2?arch=source&distro=esm-apps/focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
Affected versions
1:0.*
1:0.0+git20190811.74dc4d7+dfsg-1
1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1
Ecosystem specific
{
"binaries": [
{
"binary_name": "golang-go.net-dev",
"binary_version": "1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2"
},
{
"binary_name": "golang-golang-x-net-dev",
"binary_version": "1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}