CVE-2024-45339 Vulnerability when creating log files in github.com/golang/glog

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

GO-2025-3372 Vulnerability when creating log files in github.com/golang/glog

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

glog 安全漏洞

glog is a Go open source hierarchical execution log for Go. A security vulnerability exists in glog versions prior to 1.2.4, which stems from the presence of a sensitive file overwrite vulnerability that allows an attacker to pre-create symbolic links to exit the program to fix it...

CVE-2024-45339: Undefined Security Weakness

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

PT-2025-2690

Name of the Vulnerable Software and Affected Versions glog affected versions not specified Description The issue arises when logs are written to a widely-writable directory, allowing an unprivileged attacker to predict a privileged process's log file path and create a symbolic link to a sensitive...

glog:fuzz_demangle: Crash in google::ParseTemplateArg

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=4933329297997824 Project: glog Fuzzing Engine: libFuzzer Fuzz Target: fuzzdemangle Job Type: libfuzzerasanglog Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff394450ef Crash State:...

glog:fuzz_demangle: Crash in google::ParseSpecialName

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=5366237065248768 Project: glog Fuzzing Engine: libFuzzer Fuzz Target: fuzzdemangle Job Type: libfuzzerasanglog Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff915e9b07 Crash State:...

glog:fuzz_demangle: Dynamic-stack-buffer-overflow in google::ParseUnqualifiedName

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=6301446183452672 Project: glog Fuzzing Engine: afl Fuzz Target: fuzzdemangle Job Type: aflasanglog Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address: 0x7ffceae391bc Crash...

glog:fuzz_demangle: Dynamic-stack-buffer-overflow in google::ParseUnscopedName

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=4668696045158400 Project: glog Fuzzing Engine: afl Fuzz Target: fuzzdemangle Job Type: aflasanglog Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address: 0x7ffe75fb14bb Crash...

buster (0.1.0), glog (0.1.0) +4 more potentially affected by unknown CVE via thread_local (1.0.1)

threadlocal CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on threadlocal and may be impacted: - buster 0.1.0 - glog 0.1.0 - simconnect 0.1.4 - skia-bindings =0.37.0, =0.37.0, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory:...