VDB
BDU%3A2020-01888
BDU%3A2020-01888
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость реализации команды «go get» языка программирования Go, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., The Go Project | Red Hat Enterprise Linux, OpenSUSE Leap, Red Hat Ceph Storage, Go, Red Hat Storage |
Timeline
- Apr 29, 2020 CVE Published
References
- http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00010.html url
- http://www.securityfocus.com/bid/106228 url
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16874 url
- https://groups.google.com/forum/?pli=1#!topic/golang-announce/Kw31K8G7Fi0 url
- https://security.gentoo.org/glsa/201812-09 url
- https://www.suse.com/security/cve/CVE-2018-16874/ advisory
- https://access.redhat.com/security/cve/cve-2018-16874 advisory