CVE-2021-44717

There's a flaw in golang's syscall.ForkExec interface. An attacker who manages to first cause a file descriptor exhaustion for the process, then cause syscall.ForkExec to be called repeatedly, could compromise data integrity and/or confidentiality in a somewhat uncontrolled way in programs linked...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 Pwn...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 Pwn...

Invalid I/O Calculation

golang-1.15:sid is vulnerable to Invalid I/O Calculation. The attack is possible when a Go program running on a Unix system is out of file descriptors and calls syscall.ForkExec and its can close file descriptor 0 when it fails, its misdirected the I/O such as writing network traffic intended for...