Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-6574HistoryFeb 07, 2018 - 9:29 p.m.
CVE-2018-6574
2018-02-0721:29:00
Debian Security Bug Tracker
security-tracker.debian.org
13
0.032 Low
EPSS
Percentile
91.2%
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow “go get” remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | golang-1.7 | <= 1.7.4-2+deb9u1 | golang-1.7_1.7.4-2+deb9u1_all.deb |
| Debian | 9 | all | golang-1.8 | < 1.8.1-1+deb9u1 | golang-1.8_1.8.1-1+deb9u1_all.deb |
Related
openvas
openvas
Fedora Update for golang FEDORA-2018-6f08b79a09
2018-02-28 00:00:00
Mageia: Security Advisory (MGASA-2018-0144)
2022-01-28 00:00:00
Fedora Update for golang FEDORA-2018-5562b6e2c0
2018-02-21 00:00:00
cve
cve
CVE-2018-6574
2018-02-07 21:29:00
mageia
mageia
Updated golang packages fix security vulnerability
2018-02-26 19:23:22
osv
osv
CVE-2018-6574
2018-02-07 21:29:00
Remote command execution via "go get" command with cgo in cmd/go
2022-08-09 18:15:41
golang-1.8 - security update
2019-02-01 00:00:00
nvd
nvd
CVE-2018-6574
2018-02-07 21:29:00
photon
photon
nessus
nessus
Fedora 27 : golang (2018-5562b6e2c0)
2018-02-21 00:00:00
Photon OS 2.0: Go PHSA-2018-2.0-0026
2019-02-07 00:00:00
Photon OS 1.0: Go PHSA-2018-1.0-0117
2019-02-07 00:00:00
archlinux
archlinux
[ASA-201802-2] go: arbitrary code execution
2018-02-09 00:00:00
[ASA-201802-3] go-pie: arbitrary code execution
2018-02-09 00:00:00
gentoo
gentoo
Go: User-assisted execution of arbitrary code
2018-03-07 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: golang-1.8.7-1.fc26
2018-02-27 16:57:44
[SECURITY] Fedora 27 Update: golang-1.9.4-1.fc27
2018-02-20 17:20:36
redhat
redhat
redhatcve
redhatcve
CVE-2018-6574
2018-02-08 18:18:55
veracode
veracode
Arbitrary Code Execution
2018-02-08 04:38:41
Arbitrary Code Execution
2019-01-15 09:21:49
ubuntucve
ubuntucve
CVE-2018-6574
2018-02-07 00:00:00
prion
prion
Command injection
2018-02-07 21:29:00
alpinelinux
alpinelinux
CVE-2018-6574
2018-02-07 21:29:00
cvelist
cvelist
CVE-2018-6574
2018-02-07 21:00:00
amazon
amazon
Medium: golang
2018-03-21 22:13:00
Medium: golang
2018-05-10 17:19:00
debian
debian
[SECURITY] [DSA 4380-1] golang-1.8 security update
2019-02-01 14:39:59
centos
centos
golang security update
2018-04-26 17:42:06