En resumen
- CVE-2016-3958 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a stdlib, go (golang).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.40%, mayor que el 33.8% de las vulnerabilidades.
- Solución: actualizar a 1.6.1, 1.5.4 o posterior.
| Package | Affected versions | Patched versions |
|---|
| stdlib Go | ≥ 1.6.0-0, < 1.6.1< 1.5.4
| 1.6.11.5.4
|
| go | = 1.6≥ 1.5, < 1.5.4≥ 1.6, < 1.6.1
| 1.5.41.6.1
|
Description
Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory.
NVD description
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free