Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:5240
HistoryOct 06, 2017 - 1:57 a.m.

Remote Code Execution (RCE)

2017-10-0601:57:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

EPSS

0.055

Percentile

93.3%

JSON

github.com/golang/go is vulnerable to remote code execution (RCE). If custom domains are used, a malicious user can set a domain example.com/proj1 to point to a subversion repository and another domain example.com/proj1/proj2 to point to a git repository. When the go get command is run, arbitrary commands in the subversion’s .git/hooks/ is executed on the system that ran the command.

Related

debian 3
veracode 1
nessus 17
osv 11
cvelist 1
ubuntucve 1
archlinux 2
nvd 1
cve 1
openvas 7
prion 1
debiancve 1
redhatcve 1
fedora 3
ibm 1
mageia 1
redhat 2
gentoo 1
amazon 2
centos 1
photon 2
debian
debian
[SECURITY] [DLA 1148-1] golang security update
2017-10-27 15:43:41
[SECURITY] [DLA 2591-1] golang-1.7 security update
2021-03-13 18:37:17
[SECURITY] [DLA 2592-1] golang-1.8 security update
2021-03-13 18:37:54
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:20:33
nessus
nessus
EulerOS 2.0 SP2 : golang (EulerOS-SA-2017-1311)
2017-12-01 00:00:00
Debian DLA-1148-1 : golang security update
2017-10-30 00:00:00
Photon OS 2.0: Go PHSA-2017-0045
2019-02-07 00:00:00
osv
osv
golang - security update
2017-10-27 00:00:00
CVE-2017-15041
2017-10-05 21:29:00
Remote command execution via "go get" in cmd/go
2022-08-09 17:31:35
cvelist
cvelist
CVE-2017-15041
2017-10-05 21:00:00
ubuntucve
ubuntucve
CVE-2017-15041
2017-10-05 00:00:00
archlinux
archlinux
[ASA-201710-15] go: arbitrary command execution
2017-10-12 00:00:00
[ASA-201710-16] go-pie: arbitrary command execution
2017-10-12 00:00:00
nvd
nvd
CVE-2017-15041
2017-10-05 21:29:00
cve
cve
CVE-2017-15041
2017-10-05 21:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2017-1311)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-1148-1)
2018-02-06 00:00:00
Mageia: Security Advisory (MGASA-2018-0089)
2022-01-28 00:00:00
prion
prion
Design/Logic Flaw
2017-10-05 21:29:00
debiancve
debiancve
CVE-2017-15041
2017-10-05 21:29:00
redhatcve
redhatcve
CVE-2017-15041
2019-10-11 17:05:51
fedora
fedora
[SECURITY] Fedora 26 Update: golang-1.8.4-1.fc26
2017-10-17 19:21:49
[SECURITY] Fedora 27 Update: golang-1.9.1-1.fc27
2017-10-11 14:48:46
[SECURITY] Fedora 25 Update: golang-1.7.6-3.fc25
2017-10-19 19:21:02
ibm
ibm
Security Bulletin: A security vulnerability has been identified in Go shipped with IBM Cloud Schematics (CVE-2017-15041, CVE-2017-15042)
2018-06-17 22:33:37
mageia
mageia
Updated golang packages fix security vulnerabilities
2018-01-22 00:31:56
redhat
redhat
(RHSA-2017:3463) Moderate: go-toolset-7 and go-toolset-7-golang security and bug fix update
2017-12-14 11:22:18
(RHSA-2018:0878) Moderate: golang security, bug fix, and enhancement update
2018-04-10 05:02:59
gentoo
gentoo
Go: Multiple vulnerabilities
2017-10-23 00:00:00
amazon
amazon
Medium: golang
2017-11-02 20:17:00
Medium: golang
2018-05-10 17:19:00
centos
centos
golang security update
2018-04-26 17:42:06
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0045
2017-11-17 00:00:00
Critical Photon OS Security Update - PHSA-2017-0002
2017-11-17 00:00:00

EPSS

0.055

Percentile

93.3%

JSON
Related for VERACODE:5240
debian3veracode1nessus17osv11cvelist1ubuntucve1archlinux2nvd1cve1openvas7prion1debiancve1redhatcve1fedora3ibm1mageia1redhat2gentoo1amazon2centos1photon2