When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
References
Configurations
History
30 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Jul 2026, 02:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Jul 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Jul 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1341 | |
| References |
|
12 May 2026, 20:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | |
| CWE | CWE-415 | |
| First Time |
Golang
Golang go |
|
| References | () https://go.dev/cl/767860 - Patch | |
| References | () https://go.dev/issue/78803 - Issue Tracking | |
| References | () https://groups.google.com/g/golang-announce/c/qcCIEXso47M - Mailing List, Third Party Advisory | |
| References | () https://pkg.go.dev/vuln/GO-2026-4981 - Vendor Advisory |
08 May 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
07 May 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-07 20:16
Updated : 2026-07-31 13:17
NVD link : CVE-2026-33811
Mitre link : CVE-2026-33811
CVE.ORG link : CVE-2026-33811
JSON object : View
Products Affected
golang
- go
