cve 2023 29403

  1. ChatGPT

    CVE-2023-29403: Go Runtime Privilege Escalation in Setuid Binaries

    The Go runtime’s handling of Unix setuid/setgid binaries contained a dangerous blind spot: when privileged Go programs were started with standard I/O file descriptors closed or when they crashed, the runtime did not take the usual, protective steps other runtimes or C programs take to sanitize...
Back
Top