Lucene search
+L

74 matches found

osv_cve
osv_cve
•added 2022/06/22 1:15 p.m.•37 views

CVE-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

9.6AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2022/06/22 1:15 p.m.•39 views

CVE-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

8AI score0.02951EPSS
SaveExploits1References9
AlpineLinux
AlpineLinux
•added 2022/06/22 1:15 p.m.•82 views

CVE-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

5.3CVSS9.1AI score0.02951EPSS
SaveExploits1
Mend
Mend
•added 2022/06/22 1:15 p.m.•2 views

CVE-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

6.9CVSS7AI score0.02951EPSS
SaveExploits1References23
Debian CVE
Debian CVE
•added 2022/06/22 1:15 p.m.•68 views

CVE-2022-29526

Removed by vendor...

5.3CVSS7AI score0.02951EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/22 12:00 a.m.•7 views

CVE-2022-29526: Improper Privilege Management

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

5.3CVSS5.8AI score0.02951EPSS
SaveExploits1References2
osv_mgasa
osv_mgasa
•added 2022/05/28 8:56 a.m.•19 views

MGASA-2022-0210 Updated golang packages fix security vulnerability

The syscall.Faccessat function checks whether the calling process can access a file. Faccessat contains a bug where it checks a file’s group permission bits if the process’s user is a member of the process’s group rather than a member of the file’s group. CVE-2022-29526...

5.3CVSS8.6AI score0.02951EPSS
SaveExploits1References4
Mageia
Mageia
•added 2022/05/28 8:56 a.m.•57 views

Updated golang packages fix security vulnerability

The syscall.Faccessat function checks whether the calling process can access a file. Faccessat contains a bug where it checks a file’s group permission bits if the process’s user is a member of the process’s group rather than a member of the file’s group. CVE-2022-29526...

5.3CVSS1.7AI score0.02951EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2022/05/28 12:00 a.m.•39 views

SUSE SLED15 / SLES15 Security Update : go1.17 (SUSE-SU-2022:1862-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1862-1 advisory. - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags...

5.3CVSS7.1AI score0.02951EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2022/05/27 12:00 a.m.•23 views

openSUSE: Security Advisory for go1.17 (SUSE-SU-2022:1862-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS9.1AI score0.02951EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/05/25 12:00 a.m.•48 views

SUSE SLED15 / SLES15 Security Update : go1.18 (SUSE-SU-2022:1829-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1829-1 advisory. - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags...

5.3CVSS7.1AI score0.02951EPSS
SaveExploits1References5
Veracode
Veracode
•added 2022/05/13 5:33 a.m.•46 views

Improper Access Control

github.com/golang/go is vulnerable to improper access control. An attacker is able to access unauthorized files in the file system because, the Faccessat function may incorrectly grant permissions to access a prohibited file when called with a non-zero flag parameter...

5.3CVSS7.6AI score0.02951EPSS
SaveExploits1References16Affected Software8
RedhatCVE
RedhatCVE
•added 2022/05/11 11:32 a.m.•86 views

CVE-2022-29526

A flaw was found in the syscall.Faccessat function when calling a process by checking the group. This flaw allows an attacker to check the process group permissions rather than a member of the file's group, affecting system availability...

6.2CVSS3AI score0.02951EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/05/11 12:00 a.m.•4 views

PT-2022-6711

Name of the Vulnerable Software and Affected Versions Go versions 1.17.0 through 1.17.9 Go versions 1.18.0 through 1.18.1 Description The issue is related to incorrect privilege assignment in the Faccessat function of the Go programming language. This can allow an attacker to bypass existing...

5.3CVSS5.8AI score0.02951EPSS
SaveExploits1References403
Rows per page
Query Builder