Lucene search
K

6 matches found

OSV
OSV
added 2024/03/06 10:58 a.m.24 views

BIT-GOLANG-2022-41716 Unsanitized NUL in environment variables on Windows in syscall and os/exec

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavi...

7.5CVSS7.5AI score0.00013EPSS
Exploits0References6
OSV
OSV
added 2022/11/02 4:15 p.m.20 views

CVE-2022-41716

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavi...

7.5CVSS7.3AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/11/02 4:15 p.m.32 views

CVE-2022-41716

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavi...

7.5CVSS6.7AI score0.00013EPSS
Exploits0References4
Prion
Prion
added 2022/11/02 4:15 p.m.25 views

Code injection

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavi...

5CVSS7.3AI score0.00013EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2022/11/02 3:28 p.m.67 views

CVE-2022-41716

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavi...

7.5CVSS6.4AI score0.00013EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2022/11/02 3:28 p.m.62 views

CVE-2022-41716

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavi...

7.5CVSS7.6AI score0.00013EPSS
Exploits0
Rows per page
Query Builder