← Back

CVE-2023-45284

nvd nist
Published: Nov 9, 2023Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local.

Affected (2)

Products: Golang: Go
Golang
1 product
Go
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Golang
Go
Before 1.20.11
Go
From 1.21.0-0 to 1.21.4
Running on/withPlatform Versions
Microsoft
Windows
All versions

References (8)

Source: security@golang.org
Issue TrackingVendor Advisory
Source: security@golang.org
Issue TrackingVendor Advisory
Source: security@golang.org
Issue TrackingMailing ListVendor Advisory
Source: security@golang.org
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingMailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory

Timeline

No history available yet.