Lucene search
Redhat.comRH:CVE-2023-29402HistoryJun 26, 2023 - 6:17 p.m.
CVE-2023-29402
2023-06-2618:17:34
redhat.com
access.redhat.com
14
golang
go command
unexpected code
build time
cgo
unexpected behavior
running
untrusted module
newline characters
go get
gopath-mode
0.002 Low
EPSS
Percentile
55.9%
A flaw was found in golang. The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program that uses cgo. This can occur when running an untrusted module that contains directories with newline characters in their names. Modules that are retrieved using the go command, for example, via “go get”, are not affected. Modules retrieved using GOPATH-mode, for example, GO111MODULE=off may be affected.
Related
osv
osv
BIT-golang-2023-29402
2024-03-06 10:55:47
Code injection via go command with cgo in cmd/go
2023-06-08 20:16:16
CVE-2023-29402
2023-06-08 21:15:16
cbl_mariner
cbl_mariner
CVE-2023-29402 affecting package golang for versions less than 1.20.7-1
2024-05-31 15:27:51
nessus
nessus
Amazon Linux AMI : golang (ALAS-2023-1784)
2023-07-20 00:00:00
CBL Mariner 2.0 Security Update: msft-golang (CVE-2023-29402)
2023-06-30 00:00:00
Amazon Linux 2 : golang (ALAS-2023-2131)
2023-07-20 00:00:00
veracode
veracode
Code Injection
2023-07-10 00:12:02
amazon
amazon
Important: golang
2023-07-17 17:39:00
Important: golang
2023-07-13 23:57:00
ubuntucve
ubuntucve
CVE-2023-29402
2023-06-08 00:00:00
cvelist
cvelist
CVE-2023-29402 Code injection via go command with cgo in cmd/go
2023-06-08 20:19:04
cve
cve
CVE-2023-29402
2023-06-08 21:15:16
prion
prion
Command injection
2023-06-08 21:15:00
debiancve
debiancve
CVE-2023-29402
2023-06-08 21:15:16
alpinelinux
alpinelinux
CVE-2023-29402
2023-06-08 21:15:16
cgr
cgr
CVE-2023-29402 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Golang Go [CVE-2023-29402]
2023-09-29 20:59:50
wolfi
wolfi
CVE-2023-29402 vulnerabilities
2024-05-31 21:07:36
mageia
mageia
Updated golang packages fix security vulnerability
2023-07-07 08:54:45
redhat
redhat
(RHSA-2023:3920) Critical: go-toolset-1.19 and go-toolset-1.19-golang security update
2023-06-29 05:25:55
(RHSA-2023:3923) Critical: go-toolset and golang security update
2023-06-29 09:38:01
(RHSA-2023:3922) Critical: go-toolset:rhel8 security update
2023-06-29 08:54:12
rocky
rocky
go-toolset and golang security update
2023-07-08 02:54:41
openvas
openvas
Fedora: Security Advisory for golang (FEDORA-2023-eb60fcd505)
2023-07-23 00:00:00
Fedora: Security Advisory for golang (FEDORA-2023-1819dc9854)
2023-08-12 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2842)
2023-09-20 00:00:00
oraclelinux
oraclelinux
go-toolset and golang security update
2023-07-07 00:00:00
go-toolset:ol8 security update
2023-07-04 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: golang-1.20.6-1.fc38
2023-07-21 02:27:24
[SECURITY] Fedora 37 Update: golang-1.19.12-1.fc37
2023-08-11 01:01:43
almalinux
almalinux
Critical: go-toolset:rhel8 security update
2023-06-29 00:00:00
Critical: go-toolset and golang security update
2023-06-29 00:00:00
redos
redos
ROS-20231109-01
2023-11-09 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0037
2023-06-23 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0043
2023-07-04 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00