CVE-2022-29526

MEDIUM

5.3

Descripcion

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Detalles CVE

Puntuacion CVSS v3.15.3

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado6/23/2022

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

fedoraproject:fedoragolang:golinux:linux_kernelnetapp:beegfs_csi_driver

Debilidades (CWE)

CWE-269

Referencias

https://github.com/golang/go/issues/52313(cve@mitre.org)

https://groups.google.com/g/golang-announce(cve@mitre.org)

https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/(cve@mitre.org)

https://security.gentoo.org/glsa/202208-02(cve@mitre.org)

https://security.netapp.com/advisory/ntap-20220729-0001/(cve@mitre.org)

https://github.com/golang/go/issues/52313(af854a3a-2127-422b-91ae-364da2661108)

https://groups.google.com/g/golang-announce(af854a3a-2127-422b-91ae-364da2661108)

https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202208-02(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20220729-0001/(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.