Vulnerability Name:

CVE-2018-6574 (CCN-138852)

Assigned:2018-02-03
Published:2018-02-03
Updated:2019-10-03
Summary:Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.
CVSS v3 Severity:7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.6 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
5.8 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L)
5.1 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:U/RC:R)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-94
CWE-20
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2018-6574

Source: REDHAT
Type: Third Party Advisory
RHSA-2018:0878

Source: REDHAT
Type: Third Party Advisory
RHSA-2018:1304

Source: XF
Type: UNKNOWN
go-cve20186574-cmd-exec(138852)

Source: CCN
Type: Go GIT Repository
cmd/go: arbitrary code execution during “go get” #23672

Source: CONFIRM
Type: Issue Tracking, Third Party Advisory
https://github.com/golang/go/issues/23672

Source: MISC
Type: Exploit, Third Party Advisory
https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574

Source: CONFIRM
Type: Mailing List, Third Party Advisory
https://groups.google.com/forum/#!topic/golang-nuts/Gbhh1NxAjMU

Source: CONFIRM
Type: Mailing List, Third Party Advisory
https://groups.google.com/forum/#!topic/golang-nuts/sprOaQ5m3Dk

Source: DEBIAN
Type: Third Party Advisory
DSA-4380

Vulnerable Configuration:Configuration 1:
  • cpe:/a:golang:go:*:*:*:*:*:*:*:* (Version <= 1.8.6)
  • OR cpe:/a:golang:go:1.9:*:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.10:beta1:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.10:beta2:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.10:rc1:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:golang:go:1.8.6:*:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:golang:go:1.10:rc1:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20186574
    V
    		CVE-2018-6574
    2023-06-22
    oval:org.opensuse.security:def:8012
    P
    		go-1.19-150000.3.26.1 on GA media (Moderate)
    2023-06-20
    oval:org.opensuse.security:def:112331
    P
    		go1.12-1.12.17-4.8 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:112327
    P
    		go-1.17-1.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:112344
    P
    		go1.9-1.9.7-11.2 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:112329
    P
    		go1.10-1.10.8-8.2 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:112330
    P
    		go1.11-1.11.13-10.5 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:105859
    P
    		Security update for java-11-openjdk (Important)
    2021-11-16
    oval:org.opensuse.security:def:105850
    P
    		Security update for busybox (Important)
    2021-10-27
    oval:org.opensuse.security:def:105851
    P
    		Security update for libvirt (Important)
    2021-10-27
    oval:org.opensuse.security:def:105852
    P
    		go1.12-1.12.17-4.8 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:105848
    P
    		go-1.17-1.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:25307
    P
    		Security update for libX11 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25040
    P
    		Security update for sudo (Important)
    2020-12-01
    oval:org.opensuse.security:def:25738
    P
    		Security update for libxslt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25541
    P
    		Security update for java-1_8_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25248
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:24967
    P
    		Security update for postgresql10 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26411
    P
    		Security update for go (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25682
    P
    		Security update for wpa_supplicant (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25389
    P
    		Security update for perl-DBI (Important)
    2020-12-01
    oval:org.opensuse.security:def:25042
    P
    		Security update for mariadb-100 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25740
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25592
    P
    		Security update for grub2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25250
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:24976
    P
    		Security update for tomcat (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26413
    P
    		Security update for go1.8 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25694
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25391
    P
    		Security update for ovmf (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25167
    P
    		Security update for python-PyYAML (Important)
    2020-12-01
    oval:org.opensuse.security:def:26376
    P
    		Security update for MozillaThunderbird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25594
    P
    		Security update for targetcli-fb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25305
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:24978
    P
    		Security update for libxml2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25696
    P
    		Security update for sudo (Important)
    2020-12-01
    oval:org.opensuse.security:def:25539
    P
    		Security update for dbus-1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25169
    P
    		Security update for openexr (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:24965
    P
    		Security update for elfutils (Low)
    2020-12-01
    oval:org.opensuse.security:def:26378
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:25680
    P
    		Security update for krb5 (Moderate)
    2020-12-01
    oval:com.redhat.rhsa:def:20180878
    P
    		RHSA-2018:0878: golang security, bug fix, and enhancement update (Moderate)
    2018-04-10
    oval:com.ubuntu.cosmic:def:201865740000000
    V
    		CVE-2018-6574 on Ubuntu 18.10 (cosmic) - low.
    2018-02-07
    oval:com.ubuntu.trusty:def:20186574000
    V
    		CVE-2018-6574 on Ubuntu 14.04 LTS (trusty) - low.
    2018-02-07
    oval:com.ubuntu.bionic:def:201865740000000
    V
    		CVE-2018-6574 on Ubuntu 18.04 LTS (bionic) - low.
    2018-02-07
    oval:com.ubuntu.artful:def:20186574000
    V
    		CVE-2018-6574 on Ubuntu 17.10 (artful) - low.
    2018-02-07
    oval:com.ubuntu.xenial:def:20186574000
    V
    		CVE-2018-6574 on Ubuntu 16.04 LTS (xenial) - low.
    2018-02-07
    oval:com.ubuntu.xenial:def:201865740000000
    V
    		CVE-2018-6574 on Ubuntu 16.04 LTS (xenial) - low.
    2018-02-07
    oval:com.ubuntu.bionic:def:20186574000
    V
    		CVE-2018-6574 on Ubuntu 18.04 LTS (bionic) - low.
    2018-02-07
    oval:com.ubuntu.cosmic:def:20186574000
    V
    		CVE-2018-6574 on Ubuntu 18.10 (cosmic) - low.
    2018-02-07
    BACK
    golang go *
    golang go 1.9
    golang go 1.9.1
    golang go 1.9.2
    golang go 1.9.3
    golang go 1.10 beta1
    golang go 1.10 beta2
    golang go 1.10 rc1
    debian debian linux 9.0
    redhat enterprise linux server 7.0
    redhat enterprise linux server aus 7.6
    redhat enterprise linux server eus 7.6
    redhat enterprise linux server tus 7.6
    golang go 1.8.6
    golang go 1.9.3
    golang go 1.10 rc1