Lucene search

K
cvelistGoCVELIST:CVE-2023-45284
HistoryNov 09, 2023 - 4:30 p.m.

CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath

2023-11-0916:30:15
Go
raw.githubusercontent.com
4
windows
path/filepath
cve-2023-45284
islocal
detection

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names โ€œCOMโ€ and โ€œLPTโ€ followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local.

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%