Arbitrary code execution via the go command with cgo in cmd/go

🗓️ 28 Jul 2022 17:43:24Reported by GoogleType

osv🔗 osv.dev👁 29 Views

Arbitrary code execution via cgo in cmd/g

Reporter	Title	Published	Views	Family All 90
OSV	BIT-golang-2020-28367	6 Mar 202411:07	–	osv
OSV	CVE-2020-28367	18 Nov 202017:15	–	osv
OSV	Red Hat Security Advisory: go-toolset-1.14-golang security update	18 Sep 202404:15	–	osv
OSV	golang-1.8 - security update	21 Nov 202000:00	–	osv
OSV	Red Hat Security Advisory: go-toolset:rhel8 security update	18 Sep 202404:16	–	osv
OSV	Red Hat Security Advisory: Red Hat OpenShift Serverless Client kn 1.12.0	18 Sep 202404:16	–	osv
OSV	golang-1.11 - security update	19 Apr 202300:00	–	osv
RedhatCVE	CVE-2020-28367	13 Nov 202018:14	–	redhatcve
RedhatCVE	CVE-2021-3115	21 Jan 202115:05	–	redhatcve
AlpineLinux	CVE-2020-28367	18 Nov 202017:15	–	alpinelinux

Source	Link
go	www.go.dev/cl/267277
go	www.go.googlesource.com/go/+/da7aa86917811a571e6634b45a457f918b8e6561
go	www.go.dev/issue/42556
groups	www.groups.google.com/g/golang-announce/c/NpBGTTmKzpM

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Jul 2022 17:24Current

7.8High risk

Vulners AI Score7.8

CVSS25.1

CVSS37.5

EPSS0.021