Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2023-39323
Description:Line directives ("//line") can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and compiler flags to be passed during compilation. This can result in unexpected execution of arbitrary code when running "go build". The line directive requires the absolute path of the file in which the directive lives, which makes exploiting this issue significantly more complex.
Test IDs: 1.3.6.1.4.1.25623.1.0.833218   1.3.6.1.4.1.25623.1.0.833664   1.3.6.1.4.1.25623.1.0.833227  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-39323
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://security.gentoo.org/glsa/202311-09
https://go.dev/cl/533215
https://go.dev/cl/533215
https://go.dev/issue/63211
https://go.dev/issue/63211
https://groups.google.com/g/golang-announce/c/XBa1oHDevAo
https://groups.google.com/g/golang-announce/c/XBa1oHDevAo
https://pkg.go.dev/vuln/GO-2023-2095
https://pkg.go.dev/vuln/GO-2023-2095




© 1998-2025 E-Soft Inc. All rights reserved.