Lucene search

K
osvGoogleOSV:GO-2023-2186
HistoryNov 08, 2023 - 10:42 p.m.

Incorrect detection of reserved device names on Windows in path/filepath

2023-11-0822:42:19
Google
osv.dev
16
windows
islocal function
reserved device names
path/filepath
software

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%

On Windows, The IsLocal function does not correctly detect reserved device names in some cases.

Reserved names followed by spaces, such as "COM1 ", and reserved names โ€œCOMโ€ and โ€œLPTโ€ followed by superscript 1, 2, or 3, are incorrectly reported as local.

With fix, IsLocal now correctly reports these names as non-local.

CPENameOperatorVersion
stdlibge1.21.0-0
stdliblt1.20.11
stdliblt1.21.4

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.3%