Lucene search
K

14 matches found

Veracode
Veracode
added 2023/01/16 4:10 p.m.17 views

Denial Of Service (DoS)

github.com/btcsuite/go-socks is vulnerable to Denial of Service DoS. The vulnerability exists because the RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program through a stack overflow...

7.5CVSS7.2AI score0.00505EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2022/12/28 12:30 a.m.13 views

GHSA-GXGJ-XJCW-FV9P socks Infinite Loop vulnerability

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...

7.5CVSS7.4AI score0.00505EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.16 views

socks Infinite Loop vulnerability

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...

7.5CVSS2.1AI score0.00505EPSS
Exploits0References4Affected Software2
NVD
NVD
added 2022/12/27 10:15 p.m.7 views

CVE-2013-10005

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...

7.5CVSS0.00505EPSS
Exploits0References2
Prion
Prion
added 2022/12/27 10:15 p.m.13 views

Stack overflow

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow...

5CVSS7AI score0.00505EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/12/27 9:13 p.m.79 views

CVE-2013-10005

CVE-2013-10005 applies to the Go SOCKS library github.com/btcsuite/go-socks. The vulnerability arises in the net.Conn implementation where RemoteAddr and LocalAddr call themselves recursively, creating an infinite loop that crashes the program via a stack overflow. Documented impact is a denial o...

7.5CVSS7.4AI score0.00505EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2021/05/18 9:7 p.m.66 views

github.com/pires/go-proxyproto denial of service vulnerability

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS5.4AI score0.00573EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/05/18 9:7 p.m.15 views

GHSA-FQH4-RH59-XHVF github.com/pires/go-proxyproto denial of service vulnerability

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS4.8AI score0.00573EPSS
Exploits0References7
OSV
OSV
added 2021/03/08 5:15 a.m.15 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS6.6AI score
Exploits0References6
NVD
NVD
added 2021/03/08 5:15 a.m.11 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS0.00573EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2021/03/08 5:15 a.m.19 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS6AI score0.00573EPSS
Exploits0References5
Prion
Prion
added 2021/03/08 5:15 a.m.11 views

Design/Logic Flaw

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4CVSS4.9AI score0.00573EPSS
Exploits0References6Affected Software2
Debian CVE
Debian CVE
added 2021/03/08 4:45 a.m.18 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS5AI score0.00573EPSS
Exploits0
Cvelist
Cvelist
added 2021/03/08 4:45 a.m.16 views

CVE-2021-23351 Denial of Service (DoS)

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.4CVSS5.3AI score0.00573EPSS
Exploits0References6
Rows per page
Query Builder