Most recent entries from all

Withdrawn: BELL-CVE-2020-28367 — CVE-2020-28367 does not affect BellSoft software

Withdrawn by the publisher.

BIT-golang-2020-28367 — Arbitrary code execution via the go command with cgo in cmd/go

Affected: Bitnami: golang

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.

certfr-2023-avi-0976 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2023-avi-0976

EUVD-2026-47024

fkie_cve-2020-28367

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.

GHSA-827f-m9xx-4cfw

Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection.

gsd-2020-28367

msrc_CVE-2020-28367 — Arbitrary code execution via the go command with cgo in cmd/go

msrc_CVE-2020-28367

openSUSE-SU-2020:2047-1 — Security update for go1.14

Security update for go1.14

RHSA-2020:5333 — Red Hat Security Advisory: go-toolset-1.14-golang security update

golang: math/big: panic during recursive division of very large numbers golang: malicious symbol names can lead to code execution at build time golang: improper validation of cgo flags can lead to code execution at build time

SUSE-SU-2020:3368-1 — Security update for go1.15

Security update for go1.15

UBUNTU-CVE-2020-28367

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.13, Ubuntu:20.04:LTS: golang-1.14 and 1 more

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.