Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2018.0238
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2018-0238)
Zusammenfassung:	The remote host is missing an update for the 'golang' package(s) announced via the MGASA-2018-0238 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'golang' package(s) announced via the MGASA-2018-0238 advisory. Vulnerability Insight: A flaw was found in Go Lang. The 'go get' implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for '://' anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a crafted web site (CVE-2018-7187) Affected Software/OS: 'golang' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7187 Debian Security Information: DSA-4379 (Google Search) https://www.debian.org/security/2019/dsa-4379 Debian Security Information: DSA-4380 (Google Search) https://www.debian.org/security/2019/dsa-4380 https://security.gentoo.org/glsa/201804-12 https://gist.github.com/SLAYEROWNER/b2a358f13ab267f2e9543bb9f9320ffc https://lists.debian.org/debian-lts-announce/2018/02/msg00029.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.