CVE-2022-30580

🗓️ 09 Aug 2022 20:18:04Reported by GoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 257 Views

Code injection vulnerability in Cmd.Start allows execution of binaries with specific names in Go versions.

Reporter	Title	Published	Views	Family All 95
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	11 Aug 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the mongo-tools utility affect IBM WebSphere Automation	29 Mar 202317:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, OpenSSL, Golang Go, and Zlib may affect IBM Spectrum Protect Plus	17 Sep 202206:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to several issues due to go compiler ( CVE-2022-29804, CVE-2022-30580, CVE-2022-30629, CVE-2022-30634 )	19 Jul 202420:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to multiple software weaknesses due to Golang	4 Apr 202521:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go and MinIO may affect IBM Spectrum Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift (CVE-2022-29804, CVE-2022-30580, CVE-2022-30629, CVE-2022-30634, CVE-2022-35919, CVE-2022-31028)	17 Sep 202213:44	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm

NVD

Node

golang goRange<1.17.11

golang goRange1.18.0–1.18.3

[
  {
    "vendor": "Go standard library",
    "product": "os/exec",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "os/exec",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.17.11",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.18.0-0",
        "lessThan": "1.18.3",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "platforms": [
      "windows"
    ],
    "programRoutines": [
      {
        "name": "Cmd.Start"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
groups	www.groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ
go	www.go.googlesource.com/go/+/960ffa98ce73ef2c2060c84c7ac28d37a83f345e
go	www.go.dev/issue/52574
go	www.go.dev/cl/403759
pkg	www.pkg.go.dev/vuln/GO-2022-0532

06 Mar 2026 18:16Current

8High risk

Vulners AI Score8

CVSS 3.17.8

EPSS0.00067

SSVC

CWE-94

cve-2022-30580 code injection go vulnerability binary execution