CVE-2023-29403

Summary

CVE-2023-29403 is a vulnerability affecting the Go runtime on Unix platforms. When a setuid or setgid binary is executed with standard I/O file descriptors closed, opening files can result in unintended content being accessed or modified with elevated privileges. Conversely, if such a program terminates via panic or signal, it may leak register contents, posing a security risk. This issue can lead to information disclosure or privilege escalation, making it crucial for Unix systems running Go binaries with setuid/setgid permissions to be updated or properly configured.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.