CVE-2024-24787 - Vulnerability Details - OpenCVE

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Golang	Go

No data.

No data.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2024/05/08/3
https://go.dev/cl/583815
https://go.dev/issue/67119
https://groups.google.com/g/golang-announce/c/wkkO4P9stm0
https://pkg.go.dev/vuln/GO-2024-2825
https://security.netapp.com/advisory/ntap-20240531-0006/

History

Thu, 13 Feb 2025 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Golang Golang go
CPEs		cpe:2.3:a:golang:go:1.21.0:-::::::
Vendors & Products		Golang Golang go
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Go

Published: 2024-05-08T15:31:14.530Z

Updated: 2025-02-13T17:40:26.439Z

Reserved: 2024-01-30T16:05:14.758Z

Link: CVE-2024-24787

Vulnrichment

Updated: 2024-08-01T23:28:12.679Z

NVD

Status : Awaiting Analysis

Published: 2024-05-08T16:15:08.183

Modified: 2024-11-21T08:59:42.297

Link: CVE-2024-24787

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-24787", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "state": "PUBLISHED", "assignerShortName": "Go", "dateReserved": "2024-01-30T16:05:14.758Z", "datePublished": "2024-05-08T15:31:14.530Z", "dateUpdated": "2025-02-13T17:40:26.439Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2024-06-10T16:10:10.782Z"}, "title": "Arbitrary code execution during build on Darwin in cmd/go", "descriptions": [{"lang": "en", "value": "On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a \"#cgo LDFLAGS\" directive."}], "affected": [{"vendor": "Go toolchain", "product": "cmd/go", "collectionURL": "https://pkg.go.dev", "packageName": "cmd/go", "versions": [{"version": "0", "lessThan": "1.21.10", "status": "affected", "versionType": "semver"}, {"version": "1.22.0-0", "lessThan": "1.22.3", "status": "affected", "versionType": "semver"}], "platforms": ["darwin"], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE 74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}]}], "references": [{"url": "https://go.dev/issue/67119"}, {"url": "https://go.dev/cl/583815"}, {"url": "https://groups.google.com/g/golang-announce/c/wkkO4P9stm0"}, {"url": "https://pkg.go.dev/vuln/GO-2024-2825"}, {"url": "https://security.netapp.com/advisory/ntap-20240531-0006/"}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/08/3"}], "credits": [{"lang": "en", "value": "Juho Fors\u00e9n (Mattermost)"}]}, "adp": [{"affected": [{"vendor": "golang", "product": "go", "cpes": ["cpe:2.3:a:golang:go:1.21.0:-:*:*:*:*:*:*"], "defaultStatus": "affected", "versions": [{"version": "1.21.0", "status": "affected"}, {"version": "1.22", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-06-05T14:49:29.014816Z", "id": "CVE-2024-24787", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-05T14:54:50.242Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:28:12.679Z"}, "title": "CVE Program Container", "references": [{"url": "https://go.dev/issue/67119", "tags": ["x_transferred"]}, {"url": "https://go.dev/cl/583815", "tags": ["x_transferred"]}, {"url": "https://groups.google.com/g/golang-announce/c/wkkO4P9stm0", "tags": ["x_transferred"]}, {"url": "https://pkg.go.dev/vuln/GO-2024-2825", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20240531-0006/", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/08/3", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://go.dev/issue/67119", "tags": ["x_transferred"]}, {"url": "https://go.dev/cl/583815", "tags": ["x_transferred"]}, {"url": "https://groups.google.com/g/golang-announce/c/wkkO4P9stm0", "tags": ["x_transferred"]}, {"url": "https://pkg.go.dev/vuln/GO-2024-2825", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20240531-0006/", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/08/3", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:28:12.679Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-24787", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-05T14:49:29.014816Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:golang:go:1.21.0:-:*:*:*:*:*:*"], "vendor": "golang", "product": "go", "versions": [{"status": "affected", "version": "1.21.0"}, {"status": "affected", "version": "1.22"}], "defaultStatus": "affected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-05T14:53:02.626Z"}}], "cna": {"title": "Arbitrary code execution during build on Darwin in cmd/go", "credits": [{"lang": "en", "value": "Juho Fors\u00e9n (Mattermost)"}], "affected": [{"vendor": "Go toolchain", "product": "cmd/go", "versions": [{"status": "affected", "version": "0", "lessThan": "1.21.10", "versionType": "semver"}, {"status": "affected", "version": "1.22.0-0", "lessThan": "1.22.3", "versionType": "semver"}], "platforms": ["darwin"], "packageName": "cmd/go", "collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected"}], "references": [{"url": "https://go.dev/issue/67119"}, {"url": "https://go.dev/cl/583815"}, {"url": "https://groups.google.com/g/golang-announce/c/wkkO4P9stm0"}, {"url": "https://pkg.go.dev/vuln/GO-2024-2825"}, {"url": "https://security.netapp.com/advisory/ntap-20240531-0006/"}, {"url": "http://www.openwall.com/lists/oss-security/2024/05/08/3"}], "descriptions": [{"lang": "en", "value": "On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a \"#cgo LDFLAGS\" directive."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE 74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}]}], "providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2024-06-10T16:10:10.782Z"}}}, "cveMetadata": {"cveId": "CVE-2024-24787", "state": "PUBLISHED", "dateUpdated": "2025-02-13T17:40:26.439Z", "dateReserved": "2024-01-30T16:05:14.758Z", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "datePublished": "2024-05-08T15:31:14.530Z", "assignerShortName": "Go"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a \"#cgo LDFLAGS\" directive."}, {"lang": "es", "value": "En Darwin, crear un m\u00f3dulo Go que contenga CGO puede desencadenar la ejecuci\u00f3n de c\u00f3digo arbitrario cuando se usa la versi\u00f3n Apple de ld, debido al uso del indicador -lto_library en una directiva \"#cgo LDFLAGS\"."}], "id": "CVE-2024-24787", "lastModified": "2024-11-21T08:59:42.297", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-05-08T16:15:08.183", "references": [{"source": "security@golang.org", "url": "http://www.openwall.com/lists/oss-security/2024/05/08/3"}, {"source": "security@golang.org", "url": "https://go.dev/cl/583815"}, {"source": "security@golang.org", "url": "https://go.dev/issue/67119"}, {"source": "security@golang.org", "url": "https://groups.google.com/g/golang-announce/c/wkkO4P9stm0"}, {"source": "security@golang.org", "url": "https://pkg.go.dev/vuln/GO-2024-2825"}, {"source": "security@golang.org", "url": "https://security.netapp.com/advisory/ntap-20240531-0006/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2024/05/08/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://go.dev/cl/583815"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://go.dev/issue/67119"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://groups.google.com/g/golang-announce/c/wkkO4P9stm0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://pkg.go.dev/vuln/GO-2024-2825"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20240531-0006/"}], "sourceIdentifier": "security@golang.org", "vulnStatus": "Awaiting Analysis"}