Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:3923
HistoryJun 29, 2023 - 9:38 a.m.

(RHSA-2023:3923) Critical: go-toolset and golang security update

2023-06-2909:38:01
access.redhat.com
9

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.7%

JSON

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

The golang packages provide the Go programming language compiler.

Security Fix(es):

  • golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402)

  • golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404)

  • golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405)

  • golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64golang-race< 1.19.10-1.el9_2golang-race-1.19.10-1.el9_2.x86_64.rpm
RedHat9s390xgolang-bin< 1.19.10-1.el9_2golang-bin-1.19.10-1.el9_2.s390x.rpm
RedHat9noarchgolang-docs< 1.19.10-1.el9_2golang-docs-1.19.10-1.el9_2.noarch.rpm
RedHat9noarchgolang-misc< 1.19.10-1.el9_2golang-misc-1.19.10-1.el9_2.noarch.rpm
RedHat9aarch64golang< 1.19.10-1.el9_2golang-1.19.10-1.el9_2.aarch64.rpm
RedHat9ppc64legolang< 1.19.10-1.el9_2golang-1.19.10-1.el9_2.ppc64le.rpm
RedHat9ppc64legolang-bin< 1.19.10-1.el9_2golang-bin-1.19.10-1.el9_2.ppc64le.rpm
RedHat9x86_64go-toolset< 1.19.10-1.el9_2go-toolset-1.19.10-1.el9_2.x86_64.rpm
RedHat9noarchgolang-src< 1.19.10-1.el9_2golang-src-1.19.10-1.el9_2.noarch.rpm
RedHat9aarch64go-toolset< 1.19.10-1.el9_2go-toolset-1.19.10-1.el9_2.aarch64.rpm
Rows per page:
1-10 of 171

Related

oraclelinux 2
nessus 31
openvas 7
osv 15
almalinux 2
fedora 2
ibm 35
redhat 2
rocky 1
mageia 1
redos 1
freebsd 1
veracode 4
debiancve 4
cve 4
ubuntucve 4
cgr 4
cbl_mariner 10
redhatcve 4
amazon 4
alpinelinux 4
wolfi 4
prion 4
photon 5
f5 1
gentoo 1
ics 1
oracle 1
oraclelinux
oraclelinux
go-toolset:ol8 security update
2023-07-04 00:00:00
go-toolset and golang security update
2023-07-07 00:00:00
nessus
nessus
Oracle Linux 8 : go-toolset:ol8 (ELSA-2023-3922)
2023-07-04 00:00:00
RHEL 8 : go-toolset:rhel8 (RHSA-2023:3922)
2023-06-29 00:00:00
Fedora 38 : golang (2023-eb60fcd505)
2023-07-21 00:00:00
openvas
openvas
Fedora: Security Advisory for golang (FEDORA-2023-1819dc9854)
2023-08-12 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2842)
2023-09-20 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2859)
2023-09-20 00:00:00
osv
osv
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-07-08 02:54:41
Critical: go-toolset and golang security update
2023-06-29 00:00:00
almalinux
almalinux
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-06-29 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: golang-1.20.6-1.fc38
2023-07-21 02:27:24
[SECURITY] Fedora 37 Update: golang-1.19.12-1.fc37
2023-08-11 01:01:43
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities
2024-03-18 14:14:58
Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities in Golang Go
2023-07-25 06:12:54
Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST
2023-10-10 20:58:35
redhat
redhat
(RHSA-2023:3922) Critical: go-toolset:rhel8 security update
2023-06-29 08:54:12
(RHSA-2023:3920) Critical: go-toolset-1.19 and go-toolset-1.19-golang security update
2023-06-29 05:25:55
rocky
rocky
go-toolset and golang security update
2023-07-08 02:54:41
mageia
mageia
Updated golang packages fix security vulnerability
2023-07-07 08:54:45
redos
redos
ROS-20231109-01
2023-11-09 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
veracode
veracode
Privilege Escalation
2023-07-10 00:03:06
Code Injection
2023-07-10 00:12:02
Argument Injection
2023-07-10 00:01:18
debiancve
debiancve
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
cve
cve
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29402
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
ubuntucve
ubuntucve
CVE-2023-29405
2023-06-08 00:00:00
CVE-2023-29402
2023-06-08 00:00:00
CVE-2023-29403
2023-06-08 00:00:00
cgr
cgr
CVE-2023-29405 vulnerabilities
2024-05-11 03:06:48
CVE-2023-29403 vulnerabilities
2024-05-11 03:06:48
CVE-2023-29402 vulnerabilities
2024-05-11 03:06:48
cbl_mariner
cbl_mariner
CVE-2023-29405 affecting package golang for versions less than 1.20.7-1
2024-05-11 03:06:46
CVE-2023-29405 affecting package msft-golang for versions less than 1.20.7-1
2024-05-11 03:06:54
CVE-2023-29402 affecting package golang for versions less than 1.20.7-1
2024-05-11 03:06:54
redhatcve
redhatcve
CVE-2023-29405
2023-06-26 18:17:40
CVE-2023-29403
2023-06-26 17:47:00
CVE-2023-29402
2023-06-26 18:17:34
amazon
amazon
Important: golang
2023-07-13 23:57:00
Important: golang
2023-07-17 17:39:00
Important: golang
2023-07-20 17:29:00
alpinelinux
alpinelinux
CVE-2023-29403
2023-06-08 21:15:16
CVE-2023-29405
2023-06-08 21:15:17
CVE-2023-29402
2023-06-08 21:15:16
wolfi
wolfi
CVE-2023-29403 vulnerabilities
2024-05-11 03:07:22
CVE-2023-29405 vulnerabilities
2024-05-11 03:07:22
CVE-2023-29402 vulnerabilities
2024-05-11 03:07:22
prion
prion
Command injection
2023-06-08 21:15:00
Design/Logic Flaw
2023-06-08 21:15:00
Command injection
2023-06-08 21:15:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0037
2023-06-23 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0043
2023-07-04 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
f5
f5
K000138679 : GoLang vulnerabilities CVE-2023-24540, CVE-2023-29400, and CVE-2023-29403
2024-02-21 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

56.7%

JSON
Related for RHSA-2023:3923
oraclelinux2nessus31openvas7osv15almalinux2fedora2ibm35redhat2rocky1mageia1redos1freebsd1veracode4debiancve4cve4ubuntucve4cgr4cbl_mariner10redhatcve4amazon4alpinelinux4wolfi4prion4photon5f51gentoo1ics1oracle1