Most recent entries from all

bdu:2023-03627

Withdrawn: BELL-CVE-2022-29526 — CVE-2022-29526 does not affect BellSoft software

Withdrawn by the publisher.

BIT-golang-2022-29526

Affected: Bitnami: golang

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

certfr-2022-avi-1069 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2022-avi-1069

Withdrawn: CLEANSTART-2026-BK59402 — Moby is an open-source project created by Docker for software containerization

Withdrawn by the publisher.

Affected: CleanStart: docker

Multiple security vulnerabilities affect the docker package. Moby is an open-source project created by Docker for software containerization. See references for individual vulnerability details.

EUVD-2026-16138

fkie_cve-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

GHSA-p782-xgp4-8hr8 — golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Affected: Go: golang.org/x/sys

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

### Specific Go Packages Affected golang.org/x/sys/unix

gsd-2022-29526

msrc_CVE-2022-29526 — Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parame…

msrc_CVE-2022-29526

OESA-2022-1857 — golang security update

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP3: golang, openEuler:22.03-LTS: golang

The Go Programming Language. Security Fix(es): Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.(CVE-2022-29526) Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.(CVE-2022-29804)

openSUSE-SU-2024:12065-1 — go1.17-1.17.10-1.1 on GA media

go1.17-1.17.10-1.1 on GA media

RHBA-2022:5869 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11 low-latency extras update

golang: syscall: faccessat checks wrong group

UBUNTU-CVE-2022-29526

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:18.04:LTS: golang-1.8, Ubuntu:18.04:LTS: golang-1.9, Ubuntu:20.04:LTS: golang-1.16, Ubuntu:20.04:LTS: golang-1.18 and 3 more

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

WID-SEC-W-2022-0491 — Red Hat Advanced Cluster Management: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen oder Informationen offenzulagen.