cve/2021/CVE-2021-41771.md

CVE-2021-41771

Description

ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.

POC

Reference

• https://www.oracle.com/security-alerts/cpujul2022.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/JakubWierzchowski/manier
• https://github.com/agadecki/malware-cryptominer-container
• https://github.com/henriquebesing/container-security
• https://github.com/kb5fls/container-security
• https://github.com/runwhen-contrib/helm-charts
• https://github.com/ruzickap/malware-cryptominer-container