En resumen
- CVE-2022-29526 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a golang.org/x/sys, stdlib, go (golang).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.0%, mayor que el 87.2% de las vulnerabilidades.
- Solución: actualizar a 0.0.0-20220412211240-33da011f77ad, 1.18.2, 1.17.10 o posterior.
| Package | Affected versions | Patched versions |
|---|
| golang.org/x/sys Go | < 0.0.0-20220412211240-33da011f77ad
| 0.0.0-20220412211240-33da011f77ad
|
| stdlib Go | ≥ 1.18.0-0, < 1.18.2< 1.17.10
| 1.18.21.17.10
|
| go | ≥ 1.18.0, < 1.18.2< 1.17.10
| 1.18.21.17.10
|
Description
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
Specific Go Packages Affected
golang.org/x/sys/unix
NVD description
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
Más vulnerabilidades de golang.org/x/sys
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free