CVE-2012-2666

Опубликовано: 09 июл. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script.

Ссылки

https://bugzilla.suse.com/show_bug.cgi?id=765455
Issue Tracking
Patch
Third Party Advisory
https://codereview.appspot.com/5992078
Exploit
Third Party Advisory
https://github.com/golang/go/commit/8ac275bb01588a8c0e6c0fe2de7fd11f08feccdd
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210902-0009/
Third Party Advisory
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2012-2666
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=765455
Issue Tracking
Patch
Third Party Advisory
https://codereview.appspot.com/5992078
Exploit
Third Party Advisory
https://github.com/golang/go/commit/8ac275bb01588a8c0e6c0fe2de7fd11f08feccdd
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210902-0009/
Third Party Advisory
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2012-2666
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:golang:go:1.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00513

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-377

Связанные уязвимости

CVE-2012-2666

CVSS3: 9.8

ubuntu

около 4 лет назад

golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script.

GHSA-259v-fw35-w989

github

больше 3 лет назад

golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script.

EPSS

Процентиль: 66%

0.00513

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-377