Wind River Support Network

HomeDefectsLIN1019-7903

Acknowledged

LIN1019-7903 : Security Advisory - go - CVE-2022-23773

Created: Feb 13, 2022 Updated: Mar 21, 2022

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CREATE(Triage):(User=admin) CVE-2022-23773 (https://nvd.nist.gov/vuln/detail/CVE-2022-23773)