Lucene search
GoogleOSV:CVE-2018-6574HistoryFeb 07, 2018 - 9:29 p.m.
CVE-2018-6574
2018-02-0721:29:00
Google
osv.dev
5
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow “go get” remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go | eq | weekly.2010-11-23 | |
| go | eq | go1.6beta1 | |
| go | eq | go1.7rc3 | |
| go | eq | go1.8rc2 | |
| go | eq | release.r56 | |
| go | eq | weekly.2011-08-10 | |
| go | eq | weekly.2010-02-04 | |
| go | eq | weekly.2011-04-04 | |
| go | eq | weekly.2010-07-01 | |
| go | eq | go1.8beta2 |
References
access.redhat.com/errata/RHSA-2018:0878
access.redhat.com/errata/RHSA-2018:1304
github.com/golang/go/issues/23672
github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574
groups.google.com/forum/#%21topic/golang-nuts/Gbhh1NxAjMU
groups.google.com/forum/#%21topic/golang-nuts/sprOaQ5m3Dk
www.debian.org/security/2019/dsa-4380
Related
cve
cve
CVE-2018-6574
2018-02-07 21:29:00
debiancve
debiancve
CVE-2018-6574
2018-02-07 21:29:00
mageia
mageia
Updated golang packages fix security vulnerability
2018-02-26 19:23:22
nvd
nvd
CVE-2018-6574
2018-02-07 21:29:00
openvas
openvas
Fedora Update for golang FEDORA-2018-6f08b79a09
2018-02-28 00:00:00
Mageia: Security Advisory (MGASA-2018-0144)
2022-01-28 00:00:00
Fedora Update for golang FEDORA-2018-5562b6e2c0
2018-02-21 00:00:00
photon
photon
archlinux
archlinux
[ASA-201802-2] go: arbitrary code execution
2018-02-09 00:00:00
[ASA-201802-3] go-pie: arbitrary code execution
2018-02-09 00:00:00
nessus
nessus
Fedora 27 : golang (2018-5562b6e2c0)
2018-02-21 00:00:00
Photon OS 1.0: Go PHSA-2018-1.0-0117
2019-02-07 00:00:00
RHEL 7 : go-toolset-7 and go-toolset-7-golang (RHSA-2018:1304)
2018-05-04 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: golang-1.8.7-1.fc26
2018-02-27 16:57:44
[SECURITY] Fedora 27 Update: golang-1.9.4-1.fc27
2018-02-20 17:20:36
gentoo
gentoo
Go: User-assisted execution of arbitrary code
2018-03-07 00:00:00
redhat
redhat
redhatcve
redhatcve
CVE-2018-6574
2018-02-08 18:18:55
veracode
veracode
Arbitrary Code Execution
2018-02-08 04:38:41
Arbitrary Code Execution
2019-01-15 09:21:49
ubuntucve
ubuntucve
CVE-2018-6574
2018-02-07 00:00:00
prion
prion
Command injection
2018-02-07 21:29:00
alpinelinux
alpinelinux
CVE-2018-6574
2018-02-07 21:29:00
cvelist
cvelist
CVE-2018-6574
2018-02-07 21:00:00
osv
osv
Remote command execution via "go get" command with cgo in cmd/go
2022-08-09 18:15:41
golang-1.8 - security update
2019-02-01 00:00:00
amazon
amazon
Medium: golang
2018-03-21 22:13:00
Medium: golang
2018-05-10 17:19:00
debian
debian
[SECURITY] [DSA 4380-1] golang-1.8 security update
2019-02-01 14:39:59
centos
centos
golang security update
2018-04-26 17:42:06