CVE catalog
CVE-2018-6574
Security update for go
- Severity
- High · CVSS 7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 7.63% · Oct 25, 2026
This update for go1.8 fixes the following issues: Security issues fixed: - CVE-2018-6574: 'go get' allows for remote command execution during source code build (bsc#1080006). Bug fixes: - bsc#1082409: Review dependencies (requires, recommends and supports) This update was imported from the SUSE:SLE-12:Update update project.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | go1.8 | package hub 12 | 1.8.7-5.1 | fixed |
| Suse | go1.8 | package hub 12 | 1.8.7-5.1 | fixed |
| Suse | go | package hub 12 | 1.9.4-15.1 | fixed |
| Suse | go1.9 | package hub 12 | 1.9.4-5.1 | fixed |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu1 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu2 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu3 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu4 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu5 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.1-0ubuntu1 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04.2 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04.3 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04.4 | vulnerable |
| Ubuntu | golang-1.8 | 18.04 | 1.8.3-2ubuntu1 | vulnerable |
| Ubuntu | golang-1.8 | 18.04 | 1.8.3-2ubuntu1.18.04.1 | vulnerable |
| Suse | go | package hub 12 | 1.9.4-15.1 | fixed |
| Suse | go1.9 | package hub 12 | 1.9.4-5.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | go1.8 | rpm | package hub 12 | 1.8.7-5.1 | Not reported | OPENSUSE-SU-2018:0629-1 | Not reported |
| Suse | go1.8 | rpm | package hub 12 | 1.8.7-5.1 | Not reported | OPENSUSE-SU-2018:0628-1 | Not reported |
| Suse | go | rpm | package hub 12 | 1.9.4-15.1 | Not reported | OPENSUSE-SU-2018:0588-1 | Not reported |
| Suse | go1.9 | rpm | package hub 12 | 1.9.4-5.1 | Not reported | OPENSUSE-SU-2018:0588-1 | Not reported |
| Suse | go | rpm | package hub 12 | 1.9.4-15.1 | Not reported | OPENSUSE-SU-2018:0589-1 | Not reported |
| Suse | go1.9 | rpm | package hub 12 | 1.9.4-5.1 | Not reported | OPENSUSE-SU-2018:0589-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://access.redhat.com/errata/RHSA-2018:0878]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_0878.json]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2018-6574]
- [https://osv.dev/vulnerability/openSUSE-SU-2018:0588-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2018:0589-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2018:0628-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2018:0629-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]