Lucene search

PRIOn knowledge basePRION:CVE-2023-45284

HistoryNov 09, 2023 - 5:15 p.m.

Code injection

2023-11-0917:15:00

PRIOn knowledge base

www.prio-n.com

code injection

windows

islocal function

reserved device names

fix

nvd

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

JSON

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names “COM” and “LPT” followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local.

CPENameOperatorVersion
golt1.20.11
goeq>= 1.21.0-0 AND < 1.21.4

CPE	Name	Operator	Version
	go	lt	1.20.11
	go	eq	>= 1.21.0-0 AND < 1.21.4

References

go.dev/cl/540277

go.dev/issue/63713

groups.google.com/g/golang-announce/c/4tU8LZfBFkY

pkg.go.dev/vuln/GO-2023-2186