Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2018-1626.NASL
HistoryDec 31, 2018 - 12:00 a.m.

openSUSE Security Update : containerd / docker and go (openSUSE-2018-1626)

2018-12-3100:00:00
This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.331 Low

EPSS

Percentile

97.1%

JSON

This update for containerd, docker and go fixes the following issues :

containerd and docker :

  • Add backport for building containerd (bsc#1102522, bsc#1113313)

  • Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. (bsc#1102522)

  • Enable seccomp support (fate#325877)

  • Update to containerd v1.1.1, which is the required version for the Docker v18.06.0-ce upgrade.
    (bsc#1102522)

  • Put containerd under the podruntime slice (bsc#1086185)

  • 3rd party registries used the default Docker certificate (bsc#1084533)

  • Handle build breakage due to missing ‘export GOPATH’ (caused by resolution of boo#1119634). I believe Docker is one of the only packages with this problem.

go :

  • golang: arbitrary command execution via VCS path (bsc#1081495, CVE-2018-7187)

  • Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (boo#1119634)

  • Fix a regression that broke go get for import path patterns containing ‘…’ (bsc#1119706)

Additionally, the package go1.10 has been added.

This update was imported from the SUSE:SLE-15:Update update project.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2018-1626.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(119952);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2018-16873", "CVE-2018-16874", "CVE-2018-16875", "CVE-2018-7187");

  script_name(english:"openSUSE Security Update : containerd / docker and go (openSUSE-2018-1626)");
  script_summary(english:"Check for the openSUSE-2018-1626 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update for containerd, docker and go fixes the following issues :

containerd and docker :

  - Add backport for building containerd (bsc#1102522,
    bsc#1113313)

  - Upgrade to containerd v1.1.2, which is required for
    Docker v18.06.1-ce. (bsc#1102522)

  - Enable seccomp support (fate#325877)

  - Update to containerd v1.1.1, which is the required
    version for the Docker v18.06.0-ce upgrade.
    (bsc#1102522)

  - Put containerd under the podruntime slice (bsc#1086185) 

  - 3rd party registries used the default Docker certificate
    (bsc#1084533)

  - Handle build breakage due to missing 'export GOPATH'
    (caused by resolution of boo#1119634). I believe Docker
    is one of the only packages with this problem.

go :

  - golang: arbitrary command execution via VCS path
    (bsc#1081495, CVE-2018-7187)

  - Make profile.d/go.sh no longer set GOROOT=, in order to
    make switching between versions no longer break. This
    ends up removing the need for go.sh entirely (because
    GOPATH is also set automatically) (boo#1119634)

  - Fix a regression that broke go get for import path
    patterns containing '...' (bsc#1119706)

Additionally, the package go1.10 has been added.

This update was imported from the SUSE:SLE-15:Update update project."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1047218"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1074971"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1080978"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1081495"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1084533"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1086185"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1094680"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1095817"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1098017"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1102522"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1104821"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1105000"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1108038"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113313"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1113978"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1114209"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1118897"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1118898"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1118899"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1119634"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1119706"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://features.opensuse.org/325877"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected containerd / docker and go packages."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerd-ctr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerd-kubic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerd-kubic-ctr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerd-kubic-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:containerd-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-bash-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic-bash-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic-test-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-kubic-zsh-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-libnetwork");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-libnetwork-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-libnetwork-kubic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-libnetwork-kubic-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-runc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-runc-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-runc-kubic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-runc-kubic-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-runc-kubic-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-runc-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-test-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:docker-zsh-completion");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:go");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:go-race");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:go1.10");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:go1.10-race");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:golang-github-docker-libnetwork");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:golang-github-docker-libnetwork-kubic");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:golang-packaging");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.0");

  script_set_attribute(attribute:"patch_publication_date", value:"2018/12/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2018/12/31");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.0)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.0", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.0", reference:"containerd-kubic-test-1.1.2-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"containerd-test-1.1.2-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"docker-bash-completion-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"docker-kubic-bash-completion-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"docker-kubic-zsh-completion-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"docker-runc-kubic-test-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"docker-runc-test-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"docker-zsh-completion-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"go-1.10.4-lp150.2.7.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"golang-packaging-15.0.11-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"containerd-1.1.2-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"containerd-ctr-1.1.2-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"containerd-kubic-1.1.2-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"containerd-kubic-ctr-1.1.2-lp150.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-debuginfo-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-debugsource-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-kubic-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-kubic-debuginfo-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-kubic-debugsource-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-kubic-test-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-kubic-test-debuginfo-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-libnetwork-debuginfo-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-libnetwork-kubic-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-libnetwork-kubic-debuginfo-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-runc-debuginfo-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-runc-kubic-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-runc-kubic-debuginfo-1.0.0rc5+gitr3562_69663f0bd4b6-lp150.5.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-test-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"docker-test-debuginfo-18.06.1_ce-lp150.5.6.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"go-race-1.10.4-lp150.2.7.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"go1.10-1.10.7-lp150.2.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"go1.10-race-1.10.7-lp150.2.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"golang-github-docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", cpu:"x86_64", reference:"golang-github-docker-libnetwork-kubic-0.7.0.1+gitr2664_3ac297bc7fd0-lp150.3.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "containerd / containerd-ctr / containerd-test / containerd-kubic / etc");
}
VendorProductVersionCPE
novellopensusecontainerdp-cpe:/a:novell:opensuse:containerd
novellopensusecontainerd-ctrp-cpe:/a:novell:opensuse:containerd-ctr
novellopensusecontainerd-kubicp-cpe:/a:novell:opensuse:containerd-kubic
novellopensusecontainerd-kubic-ctrp-cpe:/a:novell:opensuse:containerd-kubic-ctr
novellopensusecontainerd-kubic-testp-cpe:/a:novell:opensuse:containerd-kubic-test
novellopensusecontainerd-testp-cpe:/a:novell:opensuse:containerd-test
novellopensusedockerp-cpe:/a:novell:opensuse:docker
novellopensusedocker-bash-completionp-cpe:/a:novell:opensuse:docker-bash-completion
novellopensusedocker-debuginfop-cpe:/a:novell:opensuse:docker-debuginfo
novellopensusedocker-debugsourcep-cpe:/a:novell:opensuse:docker-debugsource
Rows per page:
1-10 of 381

References

Related

nessus 40
suse 16
openvas 37
gentoo 2
mageia 3
archlinux 2
fedora 9
arista 1
ibm 3
amazon 2
osv 15
debiancve 4
cve 4
redhatcve 4
nvd 4
cvelist 4
veracode 4
prion 4
ubuntucve 4
debian 5
checkpoint_advisories 1
photon 11
oraclelinux 2
nessus
nessus
SUSE SLED15 / SLES15 Security Update : containerd, docker / go (SUSE-SU-2018:4297-1)
2019-01-02 00:00:00
openSUSE Security Update : containerd / docker and go (openSUSE-2019-1044)
2019-03-27 00:00:00
openSUSE Security Update : docker (openSUSE-2019-189)
2019-02-19 00:00:00
suse
suse
Security update for containerd, docker and go (important)
2018-12-29 15:14:16
Security update for helm (moderate)
2019-07-14 00:00:00
Security update for go1.10 (important)
2018-12-23 00:08:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:4297-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for containerd (openSUSE-SU-2018:4306-1)
2019-01-01 00:00:00
openSUSE: Security Advisory for docker (openSUSE-SU-2019:0189-1)
2019-02-17 00:00:00
gentoo
gentoo
Go: Multiple vulnerabilities
2018-12-21 00:00:00
Go: Arbitrary code execution
2018-04-15 00:00:00
mageia
mageia
Updated docker packages fix security vulnerability
2019-05-19 14:27:30
Updated golang packages fix security vulnerability
2019-02-13 14:08:25
Updated golang packages fix security vulnerability
2018-05-16 11:24:56
archlinux
archlinux
[ASA-201812-11] go: multiple issues
2018-12-18 00:00:00
[ASA-201812-12] go-pie: multiple issues
2018-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: golang-1.10.7-1.fc28
2019-01-11 03:00:42
[SECURITY] Fedora 29 Update: golang-1.11.4-1.fc29
2019-01-11 04:35:42
[SECURITY] Fedora 28 Update: golang-1.10.8-1.fc28
2019-02-20 02:37:34
arista
arista
Security Advisory 0039
2019-01-16 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Private for Data is affected by multiple vulnerabilties in Go Language (CVE-2018-16874, CVE-2018-16873, CVE-2018-16875)
2019-10-03 22:50:40
Security Bulletin: Multiple Vulnerabilities in Go affects IBM Watson Studio Local
2019-12-20 13:58:07
Security Bulletin: IBM Event Streams is affected by Go vulnerabilities
2019-03-29 11:00:02
amazon
amazon
Important: golang
2018-12-14 18:50:00
Medium: golang
2018-03-21 22:13:00
osv
osv
CVE-2018-16875
2018-12-14 14:29:00
CVE-2018-16873
2018-12-14 14:29:00
Remote command execution via "go get" with "-u" flag in cmd/go
2022-08-04 21:30:35
debiancve
debiancve
CVE-2018-16875
2018-12-14 14:29:00
CVE-2018-16873
2018-12-14 14:29:00
CVE-2018-16874
2018-12-14 14:29:00
cve
cve
CVE-2018-16874
2018-12-14 14:29:00
CVE-2018-16873
2018-12-14 14:29:00
CVE-2018-16875
2018-12-14 14:29:00
redhatcve
redhatcve
CVE-2018-16874
2018-12-14 02:21:18
CVE-2018-16873
2018-12-14 02:19:57
CVE-2018-16875
2018-12-14 02:20:37
nvd
nvd
CVE-2018-16874
2018-12-14 14:29:00
CVE-2018-16873
2018-12-14 14:29:00
CVE-2018-16875
2018-12-14 14:29:00
cvelist
cvelist
CVE-2018-16873
2018-12-14 14:00:00
CVE-2018-16874
2018-12-14 14:00:00
CVE-2018-16875
2018-12-14 14:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-03-14 00:10:58
Directory Traversal
2021-03-14 00:10:59
Remote Code Execution (RCE)
2018-12-17 09:16:57
prion
prion
Design/Logic Flaw
2018-12-14 14:29:00
Directory traversal
2018-12-14 14:29:00
Code injection
2018-12-14 14:29:00
ubuntucve
ubuntucve
CVE-2018-16874
2018-12-14 00:00:00
CVE-2018-16873
2018-12-14 00:00:00
CVE-2018-16875
2018-12-14 00:00:00
debian
debian
[SECURITY] [DLA 1294-1] golang security update
2018-02-25 15:59:05
[SECURITY] [DLA 2592-1] golang-1.8 security update
2021-03-13 18:37:54
[SECURITY] [DLA 2591-1] golang-1.7 security update
2021-03-13 18:37:17
checkpoint_advisories
checkpoint_advisories
Google Golang Get Command Injection (CVE-2018-7187)
2018-04-30 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0034
2018-04-07 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0123
2018-04-07 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0167
2019-06-28 00:00:00
oraclelinux
oraclelinux
kubernetes kubeadm-upgrade kubeadm-ha-setup security update
2019-04-13 00:00:00
kubernetes kubeadm-ha-setup kubeadm-upgrade security update
2020-04-17 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.331 Low

EPSS

Percentile

97.1%

JSON
Related for OPENSUSE-2018-1626.NASL
nessus40suse16openvas37gentoo2mageia3archlinux2fedora9arista1ibm3amazon2osv15debiancve4cve4redhatcve4nvd4cvelist4veracode4prion4ubuntucve4debian5checkpoint_advisories1photon11oraclelinux2