Lucene search
Veracode Vulnerability DatabaseVERACODE:46821HistoryMay 09, 2024 - 6:07 a.m.
Arbitrary Code Execution
2024-05-0906:07:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
arbitrary code execution
golang/go
cgo code
darwin systems
github.com/golang/go is vulnerable to Arbitrary Code Execution. The vulnerability is caused by building a GO module which contains Cgo code due to usage of the -lto_library flag in a #cgo LDFLAGS directive. Note that this vulnerability is only exploitable on Darwin systems.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/golang/go | le | go1.22.2 | |
| github.com/golang/go | le | go1.21.9 | |
| github.com/golang/go | le | go1.22.2 | |
| github.com/golang/go | le | go1.21.9 |
References
www.openwall.com/lists/oss-security/2024/05/08/3
github.com/golang/go/commit/348b23830d82aece5775eb9f7f3b3587cf5300c6
github.com/golang/go/issues/67119
go.dev/cl/583815
go.dev/issue/67119
groups.google.com/g/golang-announce/c/wkkO4P9stm0
pkg.go.dev/vuln/GO-2024-2825
security.netapp.com/advisory/ntap-20240531-0006/
Related
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.21 (SUSE-SU-2024:1588-1)
2024-05-11 00:00:00
Golang < 1.21.10, 1.22.x < 1.22.3 Code Execution
2024-05-13 00:00:00
SUSE SLES12 Security Update : go1.21 (SUSE-SU-2024:1574-1)
2024-05-10 00:00:00
cgr
cgr
CVE-2024-24787 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-24787
2024-05-08 00:00:00
osv
osv
CGA-fcwq-p8wm-vvr9
2024-06-13 16:06:13
Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:17:04
BIT-golang-2024-24787
2024-05-14 07:18:33
cve
cve
CVE-2024-24787
2024-05-08 16:15:08
debiancve
debiancve
CVE-2024-24787
2024-05-08 16:15:08
alpinelinux
alpinelinux
CVE-2024-24787
2024-05-08 16:15:08
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2024:1588-1)
2024-05-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1588-1)
2024-05-13 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:1587-1)
2024-05-13 00:00:00
vulnrichment
vulnrichment
CVE-2024-24787 Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:31:14
githubexploit
githubexploit
Exploit for CVE-2024-24787
2024-05-10 07:45:51
nvd
nvd
CVE-2024-24787
2024-05-08 16:15:08
cvelist
cvelist
CVE-2024-24787 Arbitrary code execution during build on Darwin in cmd/go
2024-05-08 15:31:14
cbl_mariner
cbl_mariner
CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3
2024-06-16 15:20:04
wolfi
wolfi
CVE-2024-24787 vulnerabilities
2024-06-16 15:20:21