DeutschShown in its original language — a full translation is planned for a future version.
Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2023-11-07
Ein lokaler Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-45284US | medium5.3 | — | ||
On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LP… | ||||
| CVE-2023-45283US | high7.5 | — | ||
The filepath package does not recognize paths with a \??\ prefix as special. On Windows, a path beginning with \??\ is a Root Local Device path equivalent to a path beginning with… | ||||
02
references
External citations — patches, advisories, analysis.
- Splunk Security Advisory SVD-2024-1012 vom 2024-10-14external
- Amazon Linux Security Advisory ALAS-2024-2388 vom 2024-01-10external
- Amazon Linux Security Advisory ALAS-2024-1903 vom 2024-01-09external
- GitHub Golang vom 2023-11-07external
- GitHub Golang vom 2023-11-07external
- SUSE Security Update SUSE-SU-2023:4708-1 vom 2023-12-11external
- SUSE Security Update SUSE-SU-2023:4709-1 vom 2023-12-14external
- SUSE Security Update SUSE-SU-2023:4931-1 vom 2023-12-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan