Em resumo
- CVE-2022-29526 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta golang.org/x/sys, stdlib, go (golang).
- Chance de exploração nos próximos 30 dias (EPSS): 3.0%, maior que 87.2% das vulnerabilidades.
- Correção: atualize para 0.0.0-20220412211240-33da011f77ad, 1.18.2, 1.17.10 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| golang.org/x/sys Go | < 0.0.0-20220412211240-33da011f77ad
| 0.0.0-20220412211240-33da011f77ad
|
| stdlib Go | ≥ 1.18.0-0, < 1.18.2< 1.17.10
| 1.18.21.17.10
|
| go | ≥ 1.18.0, < 1.18.2< 1.17.10
| 1.18.21.17.10
|
Description
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
Specific Go Packages Affected
golang.org/x/sys/unix
NVD description
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
Mais vulnerabilidades de golang.org/x/sys
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free