[{"vendor":"golang","product":"go","defaultStatus":"unknown","cpes":["cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"1.21.11","versionType":"semver","status":"affected"},{"version":"1.22.0-0","lessThan":"1.22.4","versionType":"semver","status":"affected"}]}]

{"timestamp":"2024-08-07T14:59:19.414359Z","id":"CVE-2024-24790","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Go standard library","product":"net/netip","defaultStatus":"unaffected","collectionURL":"https://pkg.go.dev","packageName":"net/netip","programRoutines":[{"name":"Addr.IsLoopback"},{"name":"Addr.IsMulticast"},{"name":"Addr.IsInterfaceLocalMulticast"},{"name":"Addr.IsLinkLocalMulticast"},{"name":"Addr.IsGlobalUnicast"},{"name":"Addr.IsPrivate"}],"versions":[{"version":"0","lessThan":"1.21.11","versionType":"semver","status":"affected"},{"version":"1.22.0-0","lessThan":"1.22.4","versionType":"semver","status":"affected"}]}]

http://www.openwall.com/lists/oss-security/2024/06/04/1

https://go.dev/cl/590316

https://go.dev/issue/67680

https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ

https://pkg.go.dev/vuln/GO-2024-2887

https://security.netapp.com/advisory/ntap-20240905-0002/

CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* versions up to (excluding) 1.21.11
     *cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* versions from (including) 1.22.0 up to (excluding) 1.22.4

http://www.openwall.com/lists/oss-security/2024/06/04/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2024/06/04/1 Mailing List, Third Party Advisory

https://go.dev/cl/590316 No Types Assigned

https://go.dev/cl/590316 Patch

https://go.dev/issue/67680 No Types Assigned

https://go.dev/issue/67680 Issue Tracking

https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ No Types Assigned

https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ Release Notes

https://pkg.go.dev/vuln/GO-2024-2887 No Types Assigned

https://pkg.go.dev/vuln/GO-2024-2887 Third Party Advisory

Go Project http://www.openwall.com/lists/oss-security/2024/06/04/1 [No types assigned]

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Go Project https://go.dev/cl/590316 [No types assigned]

Go Project https://go.dev/issue/67680 [No types assigned]

Go Project https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ [No types assigned]

Go Project https://pkg.go.dev/vuln/GO-2024-2887 [No types assigned]