Denial Of Service(DoS)

🗓️ 09 Mar 2021 02:55:16Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 17 Views

github.com/pires/go-proxyproto vulnerability in parseVersion1 allows Do

Reporter	Title	Published	Views	Family All 21
ATTACKERKB	CVE-2021-23351	8 Mar 202104:40	–	attackerkb
Circl	CVE-2021-23351	8 Mar 202107:50	–	circl
CNNVD	Pires go-proxyproto 安全漏洞	8 Mar 202100:00	–	cnnvd
CVE	CVE-2021-23351	8 Mar 202104:45	–	cve
Cvelist	CVE-2021-23351 Denial of Service (DoS)	8 Mar 202104:45	–	cvelist
Debian CVE	CVE-2021-23351	8 Mar 202104:45	–	debiancve
EUVD	EUVD-2021-1065	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 33 Update: golang-github-pires-proxyproto-0.5.0-1.fc33	17 Mar 202102:18	–	fedora
Fedora	[SECURITY] Fedora 34 Update: golang-github-pires-proxyproto-0.5.0-1.fc34	19 Mar 202120:31	–	fedora
Tenable Nessus	Fedora 33 : golang-github-pires-proxyproto (2021-e01c1fe4cc)	17 Mar 202100:00	–	nessus

Vulners

Node

pires github.com/pires/go-proxyprotoRange0.1.0–0.4.2go

Source	Link
github	www.github.com/pires/go-proxyproto/commit/7f48261db810703d173f27f3309a808cc2b49b8b
github	www.github.com/pires/go-proxyproto/issues/69
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BNVGJMVI3ZTZ675EFPUHPGXCKCGSX46/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/4BNVGJMVI3ZTZ675EFPUHPGXCKCGSX46/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36IBVOZXRTWM7MGTRUTOM56P5RR74VU/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/C36IBVOZXRTWM7MGTRUTOM56P5RR74VU/
github	www.github.com/pires/go-proxyproto/pull/71
github	www.github.com/pires/go-proxyproto/releases/tag/v0.5.0

07 Nov 2023 23:04Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.4 - 4.9

CVSS 24

EPSS0.00573

github.com/pires/go-proxyproto vulnerability parseversion1 denial of service memory exhaustion