CVE-2023-45284

unknown

Published 2023-11-08 · Modified 2026-02-04

CVSS v3

—

CVSS v2

—

VIR risk

—

Description

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2023-45284

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2023-45284.html

OS impact

OS	Version	Status
sles		affected
debian	bullseye	affected
debian	bookworm	affected

Package impact

Ecosystem	Package	Vulnerable	Fixed
Go	stdlib	`>=1.21.0-0,<1.21.4`	`1.20.11`

References

https://go.dev/issue/63713
https://go.dev/cl/540277
https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY
https://www.suse.com/security/cve/CVE-2023-45284.html
https://security-tracker.debian.org/tracker/CVE-2023-45284

Verify integrity in audit chain (admin only). AS-IS.