CVE-2023-45284

On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as "COM1 ", and reserved names "COM" and "LPT" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local.

• https://go.dev/cl/540277Issue Tracking, Vendor Advisory
• https://go.dev/issue/63713Issue Tracking, Vendor Advisory
• https://groups.google.com/g/golang-announce/c/4tU8LZfBFkYIssue Tracking, Mailing List, Vendor Advisory
• https://pkg.go.dev/vuln/GO-2023-2186Issue Tracking, Vendor Advisory
• https://go.dev/cl/540277Issue Tracking, Vendor Advisory
• https://go.dev/issue/63713Issue Tracking, Vendor Advisory
• https://groups.google.com/g/golang-announce/c/4tU8LZfBFkYIssue Tracking, Mailing List, Vendor Advisory
• https://pkg.go.dev/vuln/GO-2023-2186Issue Tracking, Vendor Advisory

Published

Nov 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45279Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucke…5.4
• CVE-2023-4528Unsafe deserialization in JSCAPE MFT Server versions prior t…7.2
• CVE-2023-45280Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucke…5.4
• CVE-2023-45281An issue in Yamcs 5.8.6 allows attackers to obtain the sessi…6.1
• CVE-2023-45282In NASA Open MCT (aka openmct) before 3.1.0, prototype pollu…7.5
• CVE-2023-45283The filepath package does not recognize paths with a \??\ pr…7.5
• CVE-2023-45285Using go get to fetch a module with the ".git" suffix may un…7.5
• CVE-2023-45286A race condition in go-resty can result in HTTP request body…5.9
• CVE-2023-45287Before Go 1.20, the RSA based TLS key exchanges used the mat…7.5
• CVE-2023-45288An attacker may cause an HTTP/2 endpoint to read arbitrary a…7.5
• CVE-2023-45289When following an HTTP redirect to a domain which is not a s…4.3
• CVE-2023-45290When parsing a multipart form (either explicitly with Reques…6.5