Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Go toolchain cmd/go 1.14.12, 1.15.5 Clear all filters
TI-2020-17205 CVE-2020-28367 · GHSA-827f-m9xx-4cfw

Arbitrary code execution via the go command with cgo in cmd/go

Priority LOW 37

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02405 Published 2020-11-18 Partial fix · 1.14.12, 1.15.5 CWE-94
TI-2020-17204 CVE-2020-28366 · GHSA-mwfg-6wv9-379f

Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

Priority LOW 37

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02342 Published 2020-11-18 Partial fix · 1.14.12, 1.15.5 CWE-94