exploitDog

CVE-2013-10005

Опубликовано: 27 дек. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

Ссылки

https://github.com/btcsuite/go-socks/commit/233bccbb1abe02f05750f7ace66f5bffdb13defc
Patch
Third Party Advisory
https://pkg.go.dev/vuln/GO-2020-0024
Patch
Vendor Advisory
https://github.com/btcsuite/go-socks/commit/233bccbb1abe02f05750f7ace66f5bffdb13defc
Patch
Third Party Advisory
https://pkg.go.dev/vuln/GO-2020-0024
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:socks5_project:socks5:*:*:*:*:*:go:*:*

Версия до 2013-08-07 (исключая)

EPSS

Процентиль: 74%

0.00853

Низкий

7.5 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

GHSA-gxgj-xjcw-fv9p

CVSS3: 7.5

github

около 3 лет назад

socks Infinite Loop vulnerability

EPSS

Процентиль: 74%

0.00853

Низкий

7.5 High

CVSS3

Дефекты

CWE-835