Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-24787HistoryMay 08, 2024 - 4:15 p.m.
CVE-2024-24787
2024-05-0816:15:08
Alpine Linux Development Team
security.alpinelinux.org
6
darwin
go module
cgo
apple version
ld
-lto_library flag
cgo ldflags
arbitrary code execution
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a “#cgo LDFLAGS” directive.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | go | < 0 | UNKNOWN |
| Alpine | 3.19-community | noarch | go | < 0 | UNKNOWN |
| Alpine | 3.20-community | noarch | go | < 0 | UNKNOWN |
Related
cgr
cgr
CVE-2024-24787 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-24787
2024-05-08 00:00:00
cve
cve
CVE-2024-24787
2024-05-08 16:15:08
osv
osv
CGA-fcwq-p8wm-vvr9
2024-06-13 16:06:13
BIT-golang-2024-24787
2024-05-14 07:18:33
Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:17:04
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.21 (SUSE-SU-2024:1588-1)
2024-05-11 00:00:00
Golang < 1.21.10, 1.22.x < 1.22.3 Code Execution
2024-05-13 00:00:00
SUSE SLES12 Security Update : go1.21 (SUSE-SU-2024:1574-1)
2024-05-10 00:00:00
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2024:1588-1)
2024-05-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1588-1)
2024-05-13 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:1587-1)
2024-05-13 00:00:00
veracode
veracode
Arbitrary Code Execution
2024-05-09 06:07:41
vulnrichment
vulnrichment
CVE-2024-24787 Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:31:14
githubexploit
githubexploit
Exploit for CVE-2024-24787
2024-05-10 07:45:51
debiancve
debiancve
CVE-2024-24787
2024-05-08 16:15:08
cvelist
cvelist
CVE-2024-24787 Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:31:14
nvd
nvd
CVE-2024-24787
2024-05-08 16:15:08
wolfi
wolfi
CVE-2024-24787 vulnerabilities
2024-06-16 15:20:21
cbl_mariner
cbl_mariner
CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3
2024-06-16 15:20:04