Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-goalpine-linux-upgrade-go1-10 | Feb 26, 2018 | Feb 7, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-tests | Apr 27, 2020 | Feb 7, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-golang | Mar 25, 2018 | Feb 7, 2018 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 7, 2018 | |
| Centos_linux | — | centos-upgrade-golangcentos-upgrade-golang-bincentos-upgrade-golang-docscentos-upgrade-golang-misccentos-upgrade-golang-srccentos-upgrade-golang-tests | Aug 28, 2019 | Feb 7, 2018 |
| Debian | debian-upgrade-golang-1-8 | Feb 2, 2019 | Feb 7, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-go | Mar 8, 2018 | Feb 7, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-golanghuawei-euleros-2_0_sp3-upgrade-golang-binhuawei-euleros-2_0_sp3-upgrade-golang-src | Sep 28, 2020 | Feb 7, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Feb 7, 2018 | |
| Redhat_linux | — | redhat-upgrade-golangredhat-upgrade-golang-binredhat-upgrade-golang-docsredhat-upgrade-golang-miscredhat-upgrade-golang-srcredhat-upgrade-golang-tests | Apr 11, 2018 | Feb 7, 2018 |
| Suse | — | suse-upgrade-gosuse-upgrade-go-docsuse-upgrade-go-racesuse-upgrade-go1-8suse-upgrade-go1-8-docsuse-upgrade-go1-8-racesuse-upgrade-go1-9suse-upgrade-go1-9-docsuse-upgrade-go1-9-race | Mar 10, 2018 | Feb 7, 2018 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Feb 7, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub