Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-24787

Published: 08/05/2024 Updated: 08/05/2024

Vulnerability Summary

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

Vulnerability Trend

Mailing Lists

Full Disclosure: [security] Go 1.22.3 and Go 1.21.10 are released
groupsgooglecom/g/golang-announce/c/wkkO4P9stm0 announces: -- -Alan Coopersmith- alancoopersmith () oracle com Oracle Solaris Engineering - blogsoraclecom/solaris ...

Github Repositories

https://github.com/LOURC0D3/CVE-2024-24787-PoC

CVE-2024-24787 Proof of Concept

CVE-2024-24787-PoC CVE-2024-24787 Proof of Concept

References

https://go.dev/issue/67119https://go.dev/cl/583815https://groups.google.com/g/golang-announce/c/wkkO4P9stm0https://pkg.go.dev/vuln/GO-2024-2825https://nvd.nist.govhttps://github.com/LOURC0D3/CVE-2024-24787-PoChttps://seclists.org/oss-sec/2024/q2/225
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248CVE-2024-3110CVE-2024-5552CVE-2024-29415HTML injectionCVE-2024-3095TCPtype confusionCVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook