Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2023-0227
HistoryJul 07, 2023 - 8:54 a.m.

Updated golang packages fix security vulnerability

2023-07-0708:54:45
Gentoo Foundation
advisories.mageia.org
14
golang
packages
security
vulnerability
command injection
arbitrary code execution
unix

0.002 Low

EPSS

Percentile

56.9%

JSON

Code injection via go command with cgo in cmd/go (CVE-2023-29402) Ignoring setuid/setgid bits. (CVE-2023-29403) Arbitrary code execution (CVE-2023-29404) Arbitrary code execution (CVE-2023-29405)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchgolang< 1.19.10-1golang-1.19.10-1.mga8

Related

nessus 31
ibm 35
openvas 7
oraclelinux 2
osv 15
redhat 3
rocky 1
fedora 2
almalinux 2
redos 1
freebsd 1
veracode 4
redhatcve 4
amazon 4
ubuntucve 4
cvelist 4
cve 4
debiancve 4
cbl_mariner 10
alpinelinux 4
wolfi 4
cgr 4
prion 4
photon 5
f5 1
gentoo 1
ics 1
oracle 1
nessus
nessus
AlmaLinux 8 : go-toolset:rhel8 (ALSA-2023:3922)
2023-06-29 00:00:00
RHEL 9 : go-toolset and golang (RHSA-2023:3923)
2023-06-29 00:00:00
EulerOS 2.0 SP11 : golang (EulerOS-SA-2023-2842)
2024-01-16 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities
2024-03-18 14:14:58
Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST
2023-10-10 20:58:35
Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities in Golang Go
2023-07-25 06:12:54
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2859)
2023-09-20 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2842)
2023-09-20 00:00:00
Fedora: Security Advisory for golang (FEDORA-2023-eb60fcd505)
2023-07-23 00:00:00
oraclelinux
oraclelinux
go-toolset and golang security update
2023-07-07 00:00:00
go-toolset:ol8 security update
2023-07-04 00:00:00
osv
osv
Critical: go-toolset and golang security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-07-08 02:54:41
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
redhat
redhat
(RHSA-2023:3920) Critical: go-toolset-1.19 and go-toolset-1.19-golang security update
2023-06-29 05:25:55
(RHSA-2023:3923) Critical: go-toolset and golang security update
2023-06-29 09:38:01
(RHSA-2023:3922) Critical: go-toolset:rhel8 security update
2023-06-29 08:54:12
rocky
rocky
go-toolset and golang security update
2023-07-08 02:54:41
fedora
fedora
[SECURITY] Fedora 38 Update: golang-1.20.6-1.fc38
2023-07-21 02:27:24
[SECURITY] Fedora 37 Update: golang-1.19.12-1.fc37
2023-08-11 01:01:43
almalinux
almalinux
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-06-29 00:00:00
redos
redos
ROS-20231109-01
2023-11-09 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
veracode
veracode
Code Injection
2023-07-10 00:12:02
Privilege Escalation
2023-07-10 00:03:06
Argument Injection
2023-07-10 00:01:18
redhatcve
redhatcve
CVE-2023-29405
2023-06-26 18:17:40
CVE-2023-29402
2023-06-26 18:17:34
CVE-2023-29403
2023-06-26 17:47:00
amazon
amazon
Important: golang
2023-07-17 17:39:00
Important: golang
2023-07-13 23:57:00
Important: golang
2023-07-20 17:29:00
ubuntucve
ubuntucve
CVE-2023-29402
2023-06-08 00:00:00
CVE-2023-29405
2023-06-08 00:00:00
CVE-2023-29403
2023-06-08 00:00:00
cvelist
cvelist
CVE-2023-29403 Unsafe behavior in setuid/setgid binaries in runtime
2023-06-08 20:19:13
CVE-2023-29402 Code injection via go command with cgo in cmd/go
2023-06-08 20:19:04
CVE-2023-29405 Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
2023-06-08 20:19:19
cve
cve
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29402
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
debiancve
debiancve
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
cbl_mariner
cbl_mariner
CVE-2023-29402 affecting package msft-golang for versions less than 1.19.10-1
2023-06-27 20:56:13
CVE-2023-29402 affecting package golang for versions less than 1.20.7-1
2024-06-03 03:07:46
CVE-2023-29403 affecting package golang for versions less than 1.20.7-1
2024-06-03 03:07:46
alpinelinux
alpinelinux
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
wolfi
wolfi
CVE-2023-29403 vulnerabilities
2024-06-02 22:01:16
CVE-2023-29405 vulnerabilities
2024-06-02 22:01:16
CVE-2023-29402 vulnerabilities
2024-06-02 22:01:16
cgr
cgr
CVE-2023-29403 vulnerabilities
2024-05-19 03:07:16
CVE-2023-29405 vulnerabilities
2024-05-19 03:07:16
CVE-2023-29402 vulnerabilities
2024-05-19 03:07:16
prion
prion
Command injection
2023-06-08 21:15:00
Design/Logic Flaw
2023-06-08 21:15:00
Command injection
2023-06-08 21:15:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0037
2023-06-23 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0043
2023-07-04 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
f5
f5
K000138679 : GoLang vulnerabilities CVE-2023-24540, CVE-2023-29400, and CVE-2023-29403
2024-02-21 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00

0.002 Low

EPSS

Percentile

56.9%

JSON
Related for MGASA-2023-0227
nessus31ibm35openvas7oraclelinux2osv15redhat3rocky1fedora2almalinux2redos1freebsd1veracode4redhatcve4amazon4ubuntucve4cvelist4cve4debiancve4cbl_mariner10alpinelinux4wolfi4cgr4prion4photon5f51gentoo1ics1oracle1