The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3923 advisory.

  - golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402)

  - golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

  - golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404)

  - golang: cmd/cgo: Arbitrary code execution triggered by linker flags (CVE-2023-29405)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : go-toolset and golang (RHSA-2023:3923)

critical Nessus Plugin ID 177768

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.5 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202404281425
Version 1.4 Jan 26, 2024, 9:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401262100
Version 1.3 Dec 8, 2023, 11:43 AM IAVM reference Plugin Feed: 202312081143
Version 1.2 Oct 13, 2023, 2:22 PM IAVM reference Plugin Feed: 202310131422
Version 1.1 Jul 20, 2023, 6:13 PM IAVM reference Plugin Feed: 202307201813
Version 1.0 Jun 29, 2023, 8:06 PM New Plugin Feed: 202306292006