Critical Go Networking Vulnerabilities Affect Multiple Ubuntu Releases

Severity: High (Score: 70.5)

Sources: Ubuntu, Linuxsecurity

Summary

Recent updates have addressed critical vulnerabilities in Go Networking affecting multiple Ubuntu versions, including 20.04 LTS, 18.04 LTS, and 16.04 LTS. The vulnerabilities, identified as CVE-2022-27664 and CVE-2022-41723, could lead to denial of service attacks, with potential for servers to hang during shutdown or experience excessive CPU usage. The issues were discovered by researchers Bahruz Jabiyev, Tommaso Innocenti, and others. The vulnerabilities primarily impact Ubuntu 22.04 LTS but have implications for older versions as well. Users are advised to update their systems to mitigate these risks. The updates are available through Ubuntu Pro. The vulnerabilities were published in 2022 and 2023, highlighting ongoing security concerns in Go Networking. Key Points: • Critical vulnerabilities in Go Networking affect Ubuntu 20.04, 18.04, and 16.04 LTS. • Denial of service attacks could result from these vulnerabilities, impacting server stability. • Users must update to the latest package versions to secure their systems.

Key Entities

• DDoS (attack_type)
• CVE-2021-33194 (cve)
• CVE-2022-27664 (cve)
• CVE-2022-41723 (cve)
• CVE-2023-3978 (cve)
• CVE-2025-22872 (cve)
• golang-go.net (domain)
• T1203 - Exploitation for Client Execution (mitre_attack)
• Ubuntu (company)