CVE-2019-9634

    Dashboard / Vulnerabilities / CVE-2019-9634

    CVE-2019-9634

    Published: 8 Mar 2019Last Modified: 8 Jul 2026
    Aliases:
    GO-2022-0220

    Summary:

    Details: Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.

    References: http://www.openwall.com/lists/oss-security/2019/04/09/1, http://www.securityfocus.com/bid/107450, https://github.com/golang/go/issues/30642

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -efa061d9f5d52846dfc3dda40eaf8eccfeeae8d2

    Affected versions

    go1.11.9
    go1.11.8
    go1.11.7
    go1.11.6
    go1.11.4
    go1.11.2
    go1.11.1
    go1.11

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High