Em resumo
- CVE-2016-3958 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta stdlib, go (golang).
- Chance de exploração nos próximos 30 dias (EPSS): 0.40%, maior que 33.8% das vulnerabilidades.
- Correção: atualize para 1.6.1, 1.5.4 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| stdlib Go | ≥ 1.6.0-0, < 1.6.1< 1.5.4
| 1.6.11.5.4
|
| go | = 1.6≥ 1.5, < 1.5.4≥ 1.6, < 1.6.1
| 1.5.41.6.1
|
Description
Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory.
NVD description
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free