Lucene search
GoogleOSV:GO-2024-2825HistoryMay 08, 2024 - 3:17 p.m.
Arbitrary code execution during build on Darwin in cmd/go
2024-05-0815:17:04
Google
osv.dev
3
security
code execution
go
darwin
ld
cgo
apple
ldflags
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a “#cgo LDFLAGS” directive.
Related
cgr
cgr
CVE-2024-24787 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-24787
2024-05-08 00:00:00
cve
cve
CVE-2024-24787
2024-05-08 16:15:08
osv
osv
CGA-fcwq-p8wm-vvr9
2024-06-13 16:06:13
BIT-golang-2024-24787
2024-05-14 07:18:33
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.21 (SUSE-SU-2024:1588-1)
2024-05-11 00:00:00
Golang < 1.21.10, 1.22.x < 1.22.3 Code Execution
2024-05-13 00:00:00
SUSE SLES12 Security Update : go1.21 (SUSE-SU-2024:1574-1)
2024-05-10 00:00:00
debiancve
debiancve
CVE-2024-24787
2024-05-08 16:15:08
alpinelinux
alpinelinux
CVE-2024-24787
2024-05-08 16:15:08
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2024:1588-1)
2024-05-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1588-1)
2024-05-13 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:1587-1)
2024-05-13 00:00:00
veracode
veracode
Arbitrary Code Execution
2024-05-09 06:07:41
vulnrichment
vulnrichment
CVE-2024-24787 Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:31:14
githubexploit
githubexploit
Exploit for CVE-2024-24787
2024-05-10 07:45:51
cvelist
cvelist
CVE-2024-24787 Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:31:14
nvd
nvd
CVE-2024-24787
2024-05-08 16:15:08
wolfi
wolfi
CVE-2024-24787 vulnerabilities
2024-06-16 15:20:21
cbl_mariner
cbl_mariner
CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3
2024-06-16 15:20:04