Lucene search

K
cbl_marinerCBL MarinerCBLMARINER:34760
HistorySep 29, 2024 - 3:34 a.m.

CVE-2023-24532 affecting package golang for versions less than 1.20.2-1

2024-09-2903:34:44
CBL Mariner
6
cve-2023-24532
golang
package vulnerability
patched version
unix

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

42.1%

CVE-2023-24532 affecting package golang for versions less than 1.20.2-1. A patched version of the package is available.

OSVersionArchitecturePackageVersionFilename
Azure Linux3.0allgolang< 1.20.2-1UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

42.1%