onyx --cves cve-2023-29402
CVE-2023-29402
- score
- <0.1
- cvss
- 9.8
- epss
- 1.7%
- published
- 2023-06-08
- kev added
- —
- first seen
The go command may generate unexpected code at build time when using cgo, especially when running untrusted modules with directories containing newline characters, potentially causing unexpected behavior during execution.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 8
- https://security.gentoo.org/glsa/202311-09
- https://security.netapp.com/advisory/ntap-20241213-0004/
- https://go.dev/cl/501226
- https://go.dev/issue/60167
- https://pkg.go.dev/vuln/GO-2023-1839
- https://groups.google.com/g/golang-announce/c/q5135a9d924/m/j0ZoAJOHAwAJ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBS3IIK6ADV24C5ULQU55QLT2UE762ZX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZ2O6YCO2IZMZJELQGZYR2WAUNEDLYV6/