Wind River Support Network

HomeDefectsLIN10-9725

Not to be fixed

LIN10-9725 : Security Advisory - go - CVE-2022-23773

Created: Feb 13, 2022 Updated: Dec 22, 2022

Resolved Date: Dec 22, 2022

Found In Version: 10.17.41.1

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CREATE(Triage):(User=admin) CVE-2022-23773 (https://nvd.nist.gov/vuln/detail/CVE-2022-23773)