golang.org/x/sys/unix has Incorrect privilege reporting in syscall
Moderate severity
GitHub Reviewed
Published
Jun 24, 2022
to the GitHub Advisory Database
•
Updated May 20, 2024
Package
Affected versions
< 0.0.0-20220412211240-33da011f77ad
Patched versions
0.0.0-20220412211240-33da011f77ad
Description
Published by the National Vulnerability Database
Jun 23, 2022
Published to the GitHub Advisory Database
Jun 24, 2022
Reviewed
Feb 8, 2023
Last updated
May 20, 2024
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
Specific Go Packages Affected
golang.org/x/sys/unix
References