Wind River Support Network

HomeDefectsLIN1018-8853

Not to be fixed

LIN1018-8853 : Security Advisory - go - CVE-2022-23773

Created: Feb 13, 2022 Updated: Nov 2, 2023

Resolved Date: Nov 2, 2023

Found In Version: 10.18.44.1

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CREATE(Triage):(User=admin) CVE-2022-23773 (https://nvd.nist.gov/vuln/detail/CVE-2022-23773)