Privilege escalation on Windows via malicious DLL in syscall

高危 7.8CVE-2016-3958 · GO-2021-0163 · Published 23/05/2016 · updated 17/06/2026

要点

CVE-2016-3958 是影响 stdlib, go (golang) 的高危 (CVSS 7.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.40%，高于 33.8% 的漏洞。
修复：升级到 1.6.1, 1.5.4 或更高版本。

Package	Affected versions	Patched versions
stdlib Go	`≥ 1.6.0-0, < 1.6.1< 1.5.4`	`1.6.11.5.4`
go golang	`= 1.6≥ 1.5, < 1.5.4≥ 1.6, < 1.6.1`	`1.5.41.6.1`

Description

Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory.

NVD description

Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.

References

go.dev/cl/21428 · FIX
go.googlesource.com/go/+/6a0bb87bd0bf0fdf8ddbd35f77a75ebd412f61b0 · FIX
go.dev/issue/14959 · REPORT
groups.google.com/g/golang-announce/c/9eqIHqaWvck · WEB
openwall.com/lists/oss-security/2016/04/05/1 · Mailing List
openwall.com/lists/oss-security/2016/04/05/2 · Mailing List
golang/go · Third Party Advisory
go-review.googlesource.com · Vendor Advisory
groups.google.com/forum

stdlib 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

stdlib

≥ 1.6.0-0, < 1.6.1< 1.5.4

1.6.11.5.4

golang

= 1.6≥ 1.5, < 1.5.4≥ 1.6, < 1.6.1

1.5.41.6.1

Description

Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory.

NVD description

stdlib 的其他漏洞

查看全部 →