The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3920 advisory.

  - golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402)

  - golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

  - golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404)

  - golang: cmd/cgo: Arbitrary code execution triggered by linker flags (CVE-2023-29405)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : go-toolset-1.19 and go-toolset-1.19-golang (RHSA-2023:3920)

critical Nessus Plugin ID 177738

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202404281425
Version 1.2 Dec 8, 2023, 11:43 AM IAVM reference Plugin Feed: 202312081143
Version 1.1 Oct 13, 2023, 2:22 PM STIG Severity (set to "I") IAVM reference Plugin Feed: 202310131422
Version 1.0 Jun 29, 2023, 2:11 PM New Plugin Feed: 202306291411