Security Advisory

CVE-2020-28366

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-11-18 00:00:00

Last updated 2024-08-04 16:33:58

Assigner Go

CVSS score not scored

State PUBLISHED

Description

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

← Browse all CVEs View on cve.org ↗