AZL-79026 CVE-2022-41716 affecting package golang 1.25.7-1

🗓️ 02 Nov 2022 16:15:11Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

AZL-79026 CVE-2022-41716: Go env vars can be overwritten by NUL values in StartProcess and os/exec.Cmd.

Reporter	Title	Published	Views	Family All 133
ibm	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
ibm	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
ibm	Security Bulletin: Vulnerabilities in Pypa Setuptools, Golang Go, OpenSSH, Minio and Certifi may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:37	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST	17 Apr 202318:56	–	ibm
ibm	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Apr 202319:38	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	12 Apr 202320:23	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Golang Go (CVE-2022-41716)	31 Mar 202317:09	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	24 Feb 202319:49	–	ibm
ibm	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41716

21 Apr 2026 04:34Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.00778

Go language Environment variables NUL values StartProcess Exec command Windows