CVE-2024-24787

🗓️ 08 May 2024 15:31:14Reported by Alpine Linux Development TeamType

alpinelinux

alpinelinux🔗 security.alpinelinux.org👁 31 Views

Arbitrary code execution in Go module with CGO on Darwin due to -lto_library flag in cgo LDFLAGS

Reporter	Title	Published	Views	Family All 528
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect IBM Storage Copy Data Management components that leverage Go	14 Jun 202416:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to multiple vulnerabilities due to Golang Go ( CVE-2024-24787, CVE-2024-24788 ).	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Golang Go	31 Oct 202420:35	–	ibm
GithubExploit	Exploit for CVE-2024-24787	10 May 202407:45	–	githubexploit
CBLMariner	CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3	12 Jun 202422:23	–	cbl_mariner
Chainguard	CVE-2024-24787 vulnerabilities	8 May 202416:15	–	cgr
Circl	CVE-2024-24787	9 May 202415:03	–	circl
CNNVD	Google Golang 安全漏洞	8 May 202400:00	–	cnnvd
CVE	CVE-2024-24787	8 May 202415:31	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Alpine Linux	–	any	go	0	go-0.apk
Alpine Linux	3.19	any	go	0	go-0.apk
Alpine Linux	3.20	any	go	0	go-0.apk
Alpine Linux	3.21	any	go	0	go-0.apk
Alpine Linux	3.22	any	go	0	go-0.apk
Alpine Linux	3.23	any	go	0	go-0.apk
Alpine Linux	3.24	any	go	0	go-0.apk

17 Jun 2026 07:14Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.4

EPSS0.0076

SSVC

darwin go module cgo apple version ld -lto_library flag cgo ldflags arbitrary code execution