Bind to all interfaces GSC-G102
Binds to all network interfaces
13)
14
15func SrvListen() {
16 nl, err := net.Listen("tcp", "0.0.0.0:8989")17 if err != nil {
18 log.Fatal(err)
19 }Binds to all network interfaces
13)
14
15func SrvListen() {
16 nl, err := net.Listen("tcp", "0.0.0.0:8989")17 if err != nil {
18 log.Fatal(err)
19 }
Description
Binding to all network interfaces can potentially open up a service to traffic on unintended interfaces.
When you bind the port to all interfaces using "0.0.0.0" as the IP address, you essentially allow it to accept connections from any IPv4 address, provided it can get to the socket via routing. Binding to all interfaces is therefore associated with security risks and is not recommended.
Bad practice
package main
import (
"log"
"net"
)
func main() {
l, err := net.Listen("tcp", "0.0.0.0:2000")
if err != nil {
log.Fatal(err)
}
defer l.Close()
}
Recommended
package main
import (
"log"
"net"
)
func main() {
l, err := net.Listen("tcp", "1.2.3.4:2000")
if err != nil {
log.Fatal(err)
}
defer l.Close()
}