vulnerability
Oracle Solaris 11: CVE-2018-16874: Vulnerability in GCC Go
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Dec 14, 2018 | Jan 19, 2021 | Feb 17, 2022 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Dec 14, 2018
Added
Jan 19, 2021
Modified
Feb 17, 2022
Description
In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution.
Solution(s)
oracle-solaris-11-4-upgrade-developer-gcc-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-common-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-go-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-go-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-go-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-go-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-9-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-9-2-0-11-4-21-0-1-69-0oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-9-9-2-0-11-4-21-0-1-69-0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.