Privilege Escalation

🗓️ 03 Nov 2022 01:43:24Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 21 Views

github.com/golang/go Privilege Escalation vulnerability in exec.go Start functio

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pypa Setuptools, Golang Go, OpenSSH, Minio and Certifi may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST	17 Apr 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Apr 202319:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	12 Apr 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Golang Go (CVE-2022-41716)	31 Mar 202317:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	24 Feb 202319:49	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm

Vulners

Node

golang github.com/golang/goRangego1.19beta1–go1.19.2go

golang github.com/golang/goRangego1–go1.18.7go

golang github.com/golang/goRangeweekly–weekly.2012-03-27go

golang github.com/golang/goRangerelease.r58–release.r60.3go

Source	Link
go-review	www.go-review.googlesource.com/c/go/+/446916
github	www.github.com/golang/go/issues/56284
groups	www.groups.google.com/g/golang-announce/c/mbHY1UY3BaM/m/hSpmRzk-AgAJ
pkg	www.pkg.go.dev/vuln/GO-2022-1095
github	www.github.com/golang/go/commit/aba57b07721cac39b4b7cf70f8dfbf9e2e299187
github	www.github.com/golang/go/commit/2a7adf4ccde9734becf41acf8274d1a190f2ec64
go	www.go.dev/cl/446916
go	www.go.dev/issue/56284
security	www.security.netapp.com/advisory/ntap-20230120-0007/

07 Nov 2023 21:53Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00013

SSVC