Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
em location, specified relative to the LibreOffice install location. Additional Analyst Notes: - CVE Program Container: References: - https://www.libreoffice.org/about-us/security/advisories/cve-2018-16858/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16858 - http://packetstormsecurity.com/files/152560/LibreOffice-Macro-Code-Execution.html - http://www.rapid7.com/db/modules/exploit/multi/fileformat/libreoffice_macro_exec - https://www.exploit-db.com/exploits/46727/ - https://access.redhat.com/errata/RHSA-2019:2130 - https://seclists.org/bugtraq/2019/Aug/28 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00059.html
CVE ID: CVE-2018-16859 State: PUBLISHED Published: 2018-11-29T17:00:00 Last Updated: 2024-08-05T10:32:54.246Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: ansible Problem Types: CWE-532 Description: Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/an
er are believed to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/pull/49142 - https://access.redhat.com/errata/RHSA-2018:3770 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859 - https://access.redhat.com/errata/RHSA-2018:3771 - http://www.securityfocus.com/bid/106004 - https://access.redhat.com/errata/RHSA-2018:3773 - https://access.redhat.com/errata/RHSA-2018:3772 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
CVE ID: CVE-2018-16860 State: PUBLISHED Published: 2019-07-31T14:38:36 Last Updated: 2024-08-05T10:32:54.113Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SAMBA Products: samba Problem Types: CWE-358 Description: A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal. Additional Anal
desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_19_23 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16860 - https://www.samba.org/samba/security/CVE-2018-16860.html - https://seclists.org/bugtraq/2019/Aug/25 - https://seclists.org/bugtraq/2019/Aug/22 - https://seclists.org/bugtraq/2019/Aug/23 - https://seclists.org/bugtraq/2019/Aug/21 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00026.html - http://seclists.org/fulldisclosure/2019/Aug/14 - http://seclists.org/fulldisclosure/2019/Aug/11 -
19-08/msg00026.html - http://seclists.org/fulldisclosure/2019/Aug/14 - http://seclists.org/fulldisclosure/2019/Aug/11 - http://seclists.org/fulldisclosure/2019/Aug/13 - http://seclists.org/fulldisclosure/2019/Aug/15 - https://support.apple.com/HT210346 - https://support.apple.com/HT210348 - https://support.apple.com/HT210351 - https://support.apple.com/HT210353 - https://security.gentoo.org/glsa/202003-52
CVE ID: CVE-2018-16861 State: PUBLISHED Published: 2018-12-07T19:00:00 Last Updated: 2024-08-05T10:32:54.072Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: The Foreman Project Products: foreman Problem Types: CWE-79 Description: A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable. Additional Analyst Notes
SRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16861 - https://access.redhat.com/errata/RHSA-2019:1222
CVE ID: CVE-2018-16862 State: PUBLISHED Published: 2018-11-26T19:00:00 Last Updated: 2024-08-05T10:32:54.234Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: [UNKNOWN] Products: kernel: Problem Types: CWE-200 Description: A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106009 - https://usn.ubuntu.com/3879-2/ - https://seclists.org/oss-sec/2
References: - http://www.securityfocus.com/bid/106009 - https://usn.ubuntu.com/3879-2/ - https://seclists.org/oss-sec/2018/q4/169 - https://usn.ubuntu.com/3879-1/ - https://lore.kernel.org/patchwork/patch/1011367/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16862 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-16863 State: PUBLISHED Published: 2018-12-03T17:00:00 Last Updated: 2024-08-05T10:32:54.123Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Artifex Products: ghostscript Problem Types: CWE-184 Description: It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.gi
rise Linux 7. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16863 - https://access.redhat.com/errata/RHSA-2018:3761 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=520bb0ea7519
CVE ID: CVE-2018-16864 State: PUBLISHED Published: 2019-01-11T20:00:00.000Z Last Updated: 2025-06-09T15:52:14.009Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: The systemd Project Products: systemd Problem Types: CWE-770 Description: An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ww
v240 are vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106523 - https://access.redhat.com/errata/RHSA-2019:0342 - https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html - https://www.debian.org/security/2019/dsa-4367 - https://access.redhat.com/errata/RHSA-2019:0204 - https://security.netapp.com/advisory/ntap-20190117-0001/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16864 - https://www.qualys.com/2019/01/09/system-down/system-down.txt - https://usn.ubuntu.com/3855-1/ - https://access.redhat.com/errata/RHSA-2019:0049 - https://access.redhat.com/errata/RHSA-2019:0271 - https://acces
5-1/ - https://access.redhat.com/errata/RHSA-2019:0049 - https://access.redhat.com/errata/RHSA-2019:0271 - https://access.redhat.com/errata/RHSA-2019:0361 - https://security.gentoo.org/glsa/201903-07 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:2402 - http://www.openwall.com/lists/oss-security/2021/07/20/2
CVE ID: CVE-2018-16865 State: PUBLISHED Published: 2019-01-11T21:00:00.000Z Last Updated: 2025-06-09T15:51:35.108Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: The systemd Project Products: systemd Problem Types: CWE-770 Description: An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable. Additional Analyst Notes: - CVE Program Conta
ecute code with journald privileges. Versions through v240 are vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2019:0342 - https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html - http://www.securityfocus.com/bid/106525 - https://www.debian.org/security/2019/dsa-4367 - https://access.redhat.com/errata/RHSA-2019:0204 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865 - https://security.netapp.com/advisory/ntap-20190117-0001/ - https://www.qualys.com/2019/01/09/system-down/system-down.txt - https://usn.ubuntu.com/3855-1/ - https://access.redhat.com/errata/RHSA-2019:0049 - https://a
stem-down/system-down.txt - https://usn.ubuntu.com/3855-1/ - https://access.redhat.com/errata/RHSA-2019:0049 - https://access.redhat.com/errata/RHSA-2019:0271 - https://access.redhat.com/errata/RHSA-2019:0361 - https://security.gentoo.org/glsa/201903-07 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://access.redhat.com/errata/RHBA-2019:0327 - http://www.openwall.com/lists/oss-security/2019/05/10/4 - https://seclists.org/bugtraq/2019/May/25 - http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html - http://seclists.org/fulldisclosure/2019/May/21 - https://access.redhat.com/errata/RHSA-2019:2402 - http://www.openwall.com/l
://seclists.org/fulldisclosure/2019/May/21 - https://access.redhat.com/errata/RHSA-2019:2402 - http://www.openwall.com/lists/oss-security/2021/07/20/2
CVE ID: CVE-2018-16866 State: PUBLISHED Published: 2019-01-11T19:00:00.000Z Last Updated: 2025-06-09T15:41:39.884Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: The systemd Project Products: systemd Problem Types: CWE-125, CWE-200 Description: An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.debian.org/security/2019/dsa-4367 - https://security.netapp.com/advisory/ntap-20190
nrichment: References: - https://www.debian.org/security/2019/dsa-4367 - https://security.netapp.com/advisory/ntap-20190117-0001/ - https://www.qualys.com/2019/01/09/system-down/system-down.txt - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16866 - https://usn.ubuntu.com/3855-1/ - http://www.securityfocus.com/bid/106527 - https://security.gentoo.org/glsa/201903-07 - http://www.openwall.com/lists/oss-security/2019/05/10/4 - https://seclists.org/bugtraq/2019/May/25 - http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html - http://seclists.org/fulldisclosure/2019/May/21 - https://access.redhat.com/errata/RHSA-2019:2091 - https://access.redhat.com/errata/
sts.org/fulldisclosure/2019/May/21 - https://access.redhat.com/errata/RHSA-2019:2091 - https://access.redhat.com/errata/RHSA-2019:3222 - https://access.redhat.com/errata/RHSA-2020:0593
CVE ID: CVE-2018-16867 State: PUBLISHED Published: 2018-12-12T13:00:00 Last Updated: 2024-08-05T10:32:54.050Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: [UNKNOWN] Products: QEMU: Problem Types: CWE-362 Description: A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usb/dev-mtp.c due to an improper filename sanitization. When the guest device is mounted in read-write mode, this allows to read/write arbitrary files which may lead do DoS scenario OR possibly lead to code execution on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.
y lead to code execution on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16867 - http://www.securityfocus.com/bid/106195 - https://www.openwall.com/lists/oss-security/2018/12/06/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/ - https://usn.ubuntu.com/3923-1/
CVE ID: CVE-2018-16868 State: PUBLISHED Published: 2018-12-03T14:00:00 Last Updated: 2024-08-05T10:32:54.146Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: gnutls Problem Types: CWE-203 Description: A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10608
lnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106080 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00068.html - http://cat.eyalro.net/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16868
CVE ID: CVE-2018-16869 State: PUBLISHED Published: 2018-12-03T14:00:00 Last Updated: 2024-08-05T10:32:54.115Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: nettle Problem Types: CWE-203 Description: A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/
s to a vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106092 - http://cat.eyalro.net/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16869
CVE ID: CVE-2018-16870 State: PUBLISHED Published: 2019-01-03T16:00:00 Last Updated: 2024-08-05T10:32:54.113Z Vendors: n/a Products: wolfssl Problem Types: CWE-200 Description: It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/1950 - http://cat.eyalro.net/
CVE ID: CVE-2018-16871 State: PUBLISHED Published: 2019-07-30T16:19:25 Last Updated: 2024-08-05T10:32:54.042Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: kernel: Problem Types: CWE-476 Description: A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost. Additional Analyst Notes: - CVE Program Container: References: - https://bu
disk writes to the NFS server will be lost. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871 - https://access.redhat.com/errata/RHSA-2019:2696 - https://access.redhat.com/errata/RHSA-2019:2730 - https://support.f5.com/csp/article/K18657134 - https://support.f5.com/csp/article/K18657134?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-2020:0740 - https://security.netapp.com/advisory/ntap-20211004-0002/
CVE ID: CVE-2018-16872 State: PUBLISHED Published: 2018-12-13T21:00:00 Last Updated: 2024-08-05T10:32:54.018Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: [UNKNOWN] Products: QEMU: Problem Types: CWE-367 Description: A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host file
An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00041.html - http://www.securityfocus.com/bid/106212 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/ - https://usn.ubuntu.com/3923-1/ - https://lists.fedoraproject.org/archives/list/package-announce
EEQQOZDZFBYKWZHXCWBZN/ - https://usn.ubuntu.com/3923-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html - https://www.debian.org/security/2019/dsa-4454 - https://seclists.org/bugtraq/2019/May/76 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16872
CVE ID: CVE-2018-16873 State: PUBLISHED Published: 2018-12-14T14:00:00 Last Updated: 2024-08-05T10:32:54.055Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: golang Problem Types: CWE-20 Description: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it's possible to arrange th
is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it's possible to arrange things so that a Git repository is cloned to a folder named ".git" by using a vanity import path that ends with "/.git". If the Git repository root contains a "HEAD" file, a "config" file, an "objects" directory, a "refs" directory, with some work to ensure the proper ordering of operations, "go get -u" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the "config" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the s
t repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running "go get -u". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106226 - https://security.gentoo.org/glsa/201812-09 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16873 - https://groups.google.com/forum/?pli=1#%21topic/golang-announce/Kw31K8G7Fi0 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html - http://lists.opensuse.org/opens
0060.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html
CVE ID: CVE-2018-16874 State: PUBLISHED Published: 2018-12-14T14:00:00 Last Updated: 2024-08-05T10:32:54.222Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: [UNKNOWN] Products: golang Problem Types: CWE-20 Description: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which
ted at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201812-09 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16874 - http://www.securityfocus.com/bid/106228 - https://groups.google.com/forum/?pli=1#%21topic/golang-announce/Kw31K8G7Fi0 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html - http://lists.opensuse.org/open
00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html