Lucene search
K

9 matches found

Github Security Blog
Github Security Blog
added 2021/05/18 9:7 p.m.66 views

github.com/pires/go-proxyproto denial of service vulnerability

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS5.4AI score0.00573EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/05/18 9:7 p.m.15 views

GHSA-FQH4-RH59-XHVF github.com/pires/go-proxyproto denial of service vulnerability

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS4.8AI score0.00573EPSS
Exploits0References7
Veracode
Veracode
added 2021/03/09 2:55 a.m.17 views

Denial Of Service(DoS)

github.com/pires/go-proxyproto is vulnerable to denial of service DoS. The vulnerability exists as the function parseVersion1 does not restrict parsing of data until it founds a newline or target stops acknowledging, allowing an attacker to send malicious proxy protocol V1 header to cause a memor...

4.9CVSS4.6AI score0.00573EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/03/08 5:15 a.m.15 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS6.6AI score
Exploits0References6
NVD
NVD
added 2021/03/08 5:15 a.m.11 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS0.00573EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2021/03/08 5:15 a.m.19 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS6AI score0.00573EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2021/03/08 4:45 a.m.18 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS5AI score0.00573EPSS
Exploits0
Cvelist
Cvelist
added 2021/03/08 4:45 a.m.16 views

CVE-2021-23351 Denial of Service (DoS)

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.4CVSS5.3AI score0.00573EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2021/03/08 4:40 a.m.4 views

CVE-2021-23351

The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service DoS via the parseVersion1 function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in t...

4.9CVSS5.7AI score0.00573EPSS
Exploits0References9
Rows per page
Query Builder