Lucene search

BIT-golang-2021-3115

🗓️ 06 Mar 2024 11:46:05Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Vulnerability in Go prior to version 1.14.14 and 1.15.x before 1.15.7 on Windows allows Command Injection and remote code execution via "go get" command, especially with cgo-dependent modules.

Reporter	Title	Published	Views	Family All 71
AlpineLinux	CVE-2021-3115	26 Jan 202118:16	–	alpinelinux
NVD	CVE-2021-3115	26 Jan 202118:16	–	nvd
OSV	CVE-2021-3115	26 Jan 202118:16	–	osv
OSV	Arbitrary code injection via the go command with cgo on Windows in cmd/go	14 Apr 202120:04	–	osv
OSV	Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.14.1 security update	18 Sep 202404:18	–	osv
OSV	Moderate: go-toolset:rhel8 security, bug fix, and enhancement update	18 May 202105:59	–	osv
OSV	Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update	18 Sep 202404:18	–	osv
OSV	Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.14.0 and security update	18 Sep 202404:17	–	osv
OSV	go1.14-1.14.15-1.6 on GA media	15 Jun 202400:00	–	osv
OSV	go1.15-1.15.15-1.2 on GA media	15 Jun 202400:00	–	osv

Source	Link
blog	www.blog.golang.org/path-security
groups	www.groups.google.com/g/golang-announce/c/mperVMGa98w
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/
security	www.security.gentoo.org/glsa/202208-02
security	www.security.netapp.com/advisory/ntap-20210219-0001/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Mar 2024 11:05Current

8High risk

Vulners AI Score8

CVSS37.5

EPSS0.015