Wind River Support Network

HomeDefectsLIN1021-2825

Fixed

LIN1021-2825 : Security Advisory - go - CVE-2022-23773

Created: Feb 13, 2022 Updated: May 7, 2022

Resolved Date: May 7, 2022

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CREATE(Triage):(User=admin) CVE-2022-23773 (https://nvd.nist.gov/vuln/detail/CVE-2022-23773)