Vulnerability Report: GO-2020-0024
- CVE-2013-10005, GHSA-gxgj-xjcw-fv9p
- Affects: github.com/btcsuite/go-socks, github.com/btcsuitereleases/go-socks
- Published: Apr 14, 2021
- Modified: Jun 12, 2023
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
Affected Packages
-
PathVersionsSymbols
-
before v0.0.0-20130808000456-233bccbb1abeall symbols
-
before v0.0.0-20130808000456-233bccbb1abeall symbols
Aliases
References
- https://github.com/btcsuite/go-socks/commit/233bccbb1abe02f05750f7ace66f5bffdb13defc
- https://vuln.go.dev/ID/GO-2020-0024.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.