CVE-2020-28367

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 12-11-2020 01:00

Last modified: - 12-11-2020 01:00

Total changes: - 10

Description

CVE-2020-28367 golang: improper validation of cgo flags can lead to code execution at build time

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

High

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

Required

User interaction

7.5

Base score

Exploitability score

Impact score

Verification logic

OR

AND

product=openshift-serverless-1/client-kn-rhel8 AND versionEndExcluding=0.18.4-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-controller-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-in-memory-channel-controller-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-mtbroker-filter-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-mtbroker-ingress-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-mtchannel-broker-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-mtping-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-storage-version-migration-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-sugar-controller-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/eventing-webhook-rhel8 AND versionEndExcluding=0.18.6-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/ingress-rhel8-operator AND versionEndExcluding=1.12.0-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/knative-rhel8-operator AND versionEndExcluding=1.12.0-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/kn-cli-artifacts-rhel8 AND versionEndExcluding=0.18.4-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/kourier-control-rhel8 AND versionEndExcluding=0.18.0-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serverless-operator-bundle AND versionEndExcluding=1.12.0-5

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serverless-rhel8-operator AND versionEndExcluding=1.12.0-4

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-activator-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-autoscaler-hpa-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-autoscaler-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-controller-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-queue-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-storage-version-migration-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/serving-webhook-rhel8 AND versionEndExcluding=0.18.2-3

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-1/svls-must-gather-rhel8 AND versionEndExcluding=1.12.0-2

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.12

AND

product=openshift-serverless-clients-0 AND versionEndExcluding=0.18.4-2.el8

vendor=Red Hat Enterprise Linux AND product=serverless AND version=1.0

AND

product=go-toolset-1.14-0 AND versionEndExcluding=1.14.12-1.el7_9

vendor=Red Hat Enterprise Linux AND product=devtools AND version=2020

AND

product=go-toolset-1.14-golang-0 AND versionEndExcluding=1.14.12-1.el7_9

vendor=Red Hat Enterprise Linux AND product=devtools AND version=2020

AND

product=go-toolset AND versionEndExcluding=rhel8-8030020201118084734.58e1918e

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=8

AND

product=golang AND version=

vendor=Red Hat Enterprise Linux AND product=ceph_storage AND version=2

AND

product=grafana AND version=

vendor=Red Hat Enterprise Linux AND product=ceph_storage AND version=2

AND

product=golang AND version=

vendor=Red Hat Enterprise Linux AND product=ceph_storage AND version=3

AND

product=gcc AND version=

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=golang AND version=

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=golang AND version=

vendor=Red Hat Enterprise Linux AND product=storage AND version=3

Reference

Keywords

REDHAT

CVE-2020-28367

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.