Most recent entries from all

Withdrawn: BELL-CVE-2020-28366 — CVE-2020-28366 does not affect BellSoft software

Withdrawn by the publisher.

BIT-golang-2020-28366 — Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

Affected: Bitnami: golang

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

certfr-2023-avi-0976 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2023-avi-0976

EUVD-2026-46995

fkie_cve-2020-28366

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

GHSA-mwfg-6wv9-379f

Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.

gsd-2020-28366

msrc_CVE-2020-28366 — Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

msrc_CVE-2020-28366

openSUSE-SU-2020:2047-1 — Security update for go1.14

Security update for go1.14

RHSA-2020:5333 — Red Hat Security Advisory: go-toolset-1.14-golang security update

golang: math/big: panic during recursive division of very large numbers golang: malicious symbol names can lead to code execution at build time golang: improper validation of cgo flags can lead to code execution at build time

SUSE-SU-2020:3368-1 — Security update for go1.15

Security update for go1.15

UBUNTU-CVE-2020-28366

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

WID-SEC-W-2024-0794 — Dell ECS: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.