PT-2023-3108

🗓️ 05 Apr 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 5 Views

Go runtime can leak data for setuid/setgid binaries with closed standard input and output, risking privilege escalation.

Reporter	Title	Published	Views	Family All 12917
ibm	Security Bulletin: IBM Storage Protect Server is susceptible to vulnerability in Golang Go (CVE-2024-34158, CVE-2024-34155, CVE-2024-34156).	1 Apr 202503:37	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Golang Go [CVE-2023-24538]	27 Jul 202317:07	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	16 Oct 202422:43	–	ibm
ibm	Security Bulletin: IBM DataPower Gateway vulnerable to HTTP/2 "Rapid Reset" Denial of Service (CVE-2023-44487, CVE-2023-39325)	26 Oct 202317:35	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Data is vulnerable to Throttling due to inadequate stream handling in http2 package ( CVE-2023-39325 )	16 Jun 202509:14	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September and October 2024.	15 Apr 202502:48	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Data is vulnerable to installation failure due to opm ( CVE-2022-41724, CVE-2022-41725, CVE-2022-41723, CVE-2015-3627, CVE-2023-25173, CVE-2023-25153, CVE-2022-23471, CVE-2023-24532 )	6 Jun 202514:53	–	ibm
ibm	Security Bulletin: IBM Instana Observability is affected by Vulnerabilities in Golang GO and VMware Tanzu Spring Framework	29 Jan 202407:02	–	ibm
ibm	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	17 Jan 202509:14	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:29	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ALSA-2023:3923
suse	www.suse.com/security/cve/CVE-2023-29405
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-29403
bdu	www.bdu.fstec.ru/vul/2023-03200
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:12987-1
go	www.go.dev/issue/60272
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29403
ubuntu	www.ubuntu.com/security/CVE-2023-39319
bugzilla	www.bugzilla.suse.com/1212073
ubuntu	www.ubuntu.com/security/CVE-2023-45288

18 Feb 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.8 - 9.8

EPSS0.91969

SSVC