Lucene search
GoogleOSV:GHSA-GQ5R-CC4W-G8XFHistoryJun 23, 2021 - 5:25 p.m.
gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures
2021-06-2317:25:08
Google
osv.dev
7
0.001 Low
EPSS
Percentile
51.0%
This affects all versions less than 0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on null pointer dereference caused by sending malformed XML signatures.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/russellhaering/goxmldsig | lt | 1.1.1 | |
| github.com/russellhaering/gosaml2 | lt | 0.7.0 |
References
github.com/russellhaering/gosaml2
github.com/russellhaering/gosaml2/commit/66e3b7affd622b8b24ea1e18845f045e46b23424
github.com/russellhaering/gosaml2/issues/59
github.com/russellhaering/gosaml2/pull/90
github.com/russellhaering/gosaml2/releases/tag/v0.7.0
github.com/russellhaering/goxmldsig/issues/48
nvd.nist.gov/vuln/detail/CVE-2020-7731
snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOSAML2-608302
Related
osv
osv
veracode
veracode
Denial Of Service (DoS)
2020-11-06 06:29:59
Denial Of Service (DoS)
2020-08-24 08:30:10
github
github
cve
cve
CVE-2020-7731
2021-04-30 16:15:07
CVE-2020-7711
2020-08-23 14:15:09
cvelist
cvelist
CVE-2020-7731 Denial of Service (DoS)
2021-04-30 00:00:00
CVE-2020-7711 Denial of Service (DoS)
2020-08-23 00:00:00
nvd
nvd
CVE-2020-7731
2021-04-30 16:15:07
CVE-2020-7711
2020-08-23 14:15:09
ubuntucve
ubuntucve
CVE-2020-7711
2020-08-23 00:00:00
prion
prion
Null pointer dereference
2021-04-30 16:15:00
Null pointer dereference
2020-08-23 14:15:00
redhatcve
redhatcve
CVE-2020-7711
2020-08-24 04:48:49
debiancve
debiancve
CVE-2020-7711
2020-08-23 14:15:09