Lucene search

K
githubGitHub Advisory DatabaseGHSA-XCF7-Q56X-78GH
HistoryJul 26, 2021 - 9:23 p.m.

github.com/pires/go-proxyproto vulnerable to DoS via Connection descriptor exhaustion

2021-07-2621:23:49
CWE-400
GitHub Advisory Database
github.com
46

0.002 Low

EPSS

Percentile

55.6%

The package github.com/pires/go-proxyproto before 0.6.1 is vulnerable to Denial of Service (DoS) via creating connections without the proxy protocol header. While this issue was patched in 0.6.0, the fix introduced additional issues which were subsequently patched in 0.6.1.

CPENameOperatorVersion
github.com/pires/go-proxyprotolt0.6.1

0.002 Low

EPSS

Percentile

55.6%

Related for GHSA-XCF7-Q56X-78GH