CVE-2021-44717

Name: CVE-2021-44717
Creator: NVD / NIST
Published: 2022-01-01T05:15:08.367+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 4.8/10EPSS 1.86%

Last modified Jun 17, 2026

CVE-2021-44717 is a medium-severity vulnerability rated 4.8/10 on the CVSS scale. Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.. EPSS estimates a 1.86% chance of exploitation in the next 30 days.

Description

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.

Metrics

CVSS 3.1

4.8/10

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS Probability

1.86%

76.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-404

Affected Software

Vendor	Product	Versions
Golang	Go	< 1.16.12
Golang	Go	>= 1.17.0, < 1.17.5
Debian	Debian Linux	9.0

References

https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf
https://groups.google.com/g/golang-announce/c/hcmEScgc00kPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00016.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00017.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
https://security.gentoo.org/glsa/202208-02Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf
https://groups.google.com/g/golang-announce/c/hcmEScgc00kPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00016.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00017.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
https://security.gentoo.org/glsa/202208-02Third Party Advisory

Timeline

Published: Jan 1, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-44717?

How severe is CVE-2021-44717?

CVE-2021-44717 has a CVSS score of 4.8/10 (MEDIUM severity). The EPSS model estimates a 1.86% probability of exploitation in the next 30 days.

How do I fix CVE-2021-44717?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-44717?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST