Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: haskellPackages.aws-lambda-haskell-runtime-wai

Found 1 matching suggestions

Untriaged
Permalink CVE-2023-29403
created 5 months, 2 weeks ago
Unsafe behavior in setuid/setgid binaries in runtime

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

References

Affected products

runtime
  • <1.20.5
  • <1.19.10

Matching in nixpkgs

pkgs.onnxruntime

Cross-platform, high performance scoring engine for ML models

  • nixos-unstable -

pkgs.kata-runtime

Lightweight Virtual Machines like containers that provide the workload isolation and security of VMs

  • nixos-unstable -

pkgs.aws-lambda-rie

Locally test Lambda functions packaged as container images

  • nixos-unstable -

pkgs.dotnetCorePackages.runtime_9_0

Core functionality needed to create .NET Core projects, that is shared between Visual Studio and CLI (wrapper)

  • nixos-unstable -