ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2018.0238
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2018-0238)
Resumen:	The remote host is missing an update for the 'golang' package(s) announced via the MGASA-2018-0238 advisory.
Descripción:	Summary: The remote host is missing an update for the 'golang' package(s) announced via the MGASA-2018-0238 advisory. Vulnerability Insight: A flaw was found in Go Lang. The 'go get' implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for '://' anywhere in the string), which allows remote attackers to execute arbitrary OS commands via a crafted web site (CVE-2018-7187) Affected Software/OS: 'golang' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7187 Debian Security Information: DSA-4379 (Google Search) https://www.debian.org/security/2019/dsa-4379 Debian Security Information: DSA-4380 (Google Search) https://www.debian.org/security/2019/dsa-4380 https://security.gentoo.org/glsa/201804-12 https://gist.github.com/SLAYEROWNER/b2a358f13ab267f2e9543bb9f9320ffc https://lists.debian.org/debian-lts-announce/2018/02/msg00029.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.