CentOS 7 : golang (CESA-2018:0878)

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Exploit for Code Injection in Golang Go

c...

Amazon Linux AMI : golang (ALAS-2018-975)

Arbitrary code execution during 'go get' via C compiler options : An arbitrary command execution flaw was found in the way Go's 'go get' command handled gcc and clang sensitive options during the build. A remote attacker capable of hosting malicious repositories could potentially use this flaw to...

Medium: golang

Issue Overview: Arbitrary code execution during "go get" via C compiler options: An arbitrary command execution flaw was found in the way Go's "go get" command handled gcc and clang sensitive options during the build. A remote attacker capable of hosting malicious repositories could potentially u...

openSUSE Security Update : go1.8 (openSUSE-2018-235)

This update for go1.8 fixes the following issues : Security issues fixed : - CVE-2018-6574: 'go get' allows for remote command execution during source code build bsc1080006. Bug fixes : - bsc1082409: Review dependencies requires, recommends and supports This update was imported from the...

Fedora 26 : golang (2018-6f08b79a09)

Security fix for CVE-2018-6574 - Rebase to latest point release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Updated golang packages fix security vulnerability

Updated golang packages fix security vulnerabilities: Go before 1.9.4 allows "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked CVE-2018-6574...

Fedora Update for golang FEDORA-2018-5562b6e2c0

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : golang (2018-5562b6e2c0)

Security fix for CVE-2018-6574 - Rebase to latest point release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[ASA-201802-3] go-pie: arbitrary code execution

Arch Linux Security Advisory ASA-201802-3 ========================================= Severity: High Date : 2018-02-09 CVE-ID : CVE-2018-6574 Package : go-pie Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-606 Summary ======= The package go-pie before version...

[ASA-201802-2] go: arbitrary code execution

Arch Linux Security Advisory ASA-201802-2 ========================================= Severity: High Date : 2018-02-09 CVE-ID : CVE-2018-6574 Package : go Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-606 Summary ======= The package go before version 1.9.4-1...

CVE-2018-6574

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked...

CVE-2018-6574

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked...

CVE-2018-6574

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before 1.10rc2 are vulnerable to remote command execution during source build via the go get workflow, by not blocking -fplugin/ -plugin usage in gcc/clang backends. A remote attacker hosting malicious repositories could trigger arb...

CVE-2013-6574

CVE-2013-6574 entry is rejected/not used as described; not an active vulnerability.

CVE-2013-6574

...

CVE-2017-6574

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...

CVE-2017-6574

The CVE-2017-6574 entry affects the Mail Masta (mail-masta) WordPress plugin v1.0. The vulnerability is a SQL injection in the code path ./inc/lists/edit_member.php with the GET parameter filter_list, exploitable from WordPress admin context. Impact described as arbitrary SQL execution with high ...

CVE-2015-6574

CVE-2015-6574 affects the SNAP Lite component in Siemens SISCO MMS-EASE and AX-S4 ICCP products. The vulnerability allows remote attackers to cause a denial-of-service (CPU consumption) by sending a specially crafted packet. Public documentation confirms affected products include SIPROTEC 5 devic...