CVE-2020-28366

Опубликовано: 19 нояб. 2020

Источник: msrc

CVSS3: 7.5

EPSS Низкий

Описание

Описание отсутствует

EPSS

Процентиль: 38%

0.00167

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2020-28366

CVSS3: 7.5

ubuntu

около 5 лет назад

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

CVE-2020-28366

CVSS3: 7.5

redhat

около 5 лет назад

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

CVE-2020-28366

CVSS3: 7.5

nvd

около 5 лет назад

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

CVE-2020-28366

CVSS3: 7.5

debian

около 5 лет назад

Code injection in the go command with cgo before Go 1.14.12 and Go 1.1 ...

GHSA-mwfg-6wv9-379f

CVSS3: 7.5

github

больше 3 лет назад

Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.

EPSS

Процентиль: 38%

0.00167

Низкий

7.5 High

CVSS3