QwikSec

Security Database

CVE

CWE

Training

CVE-2021-3115

Published: Jan 26, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://groups.google.com/g/golang-announce/c/mperVMGa98w

x_refsource_CONFIRM

https://blog.golang.org/path-security

x_refsource_CONFIRM

FEDORA-2021-e435a8bb88

vendor-advisory

x_refsource_FEDORA

https://security.netapp.com/advisory/ntap-20210219-0001/

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.