| modules: | |
| - module: github.com/miekg/dns | |
| versions: | |
| - fixed: 1.0.4-0.20180125103619-43913f2f4fbd | |
| vulnerable_at: 1.0.3 | |
| packages: | |
| - package: github.com/miekg/dns | |
| symbols: | |
| - Server.serveTCP | |
| derived_symbols: | |
| - ActivateAndServe | |
| - ListenAndServe | |
| - ListenAndServeTLS | |
| - Server.ActivateAndServe | |
| - Server.ListenAndServe | |
| description: | | |
| An attacker may prevent TCP connections to a Server by opening | |
| a connection and leaving it idle, until the connection is closed by | |
| the server no other connections will be accepted. | |
| published: 2021-04-14T20:04:52Z | |
| cves: | |
| - CVE-2017-15133 | |
| ghsas: | |
| - GHSA-p55x-7x9v-q8m4 | |
| credit: Pedro Sampaio | |
| references: | |
| - fix: https://github.com/miekg/dns/pull/631 | |
| - fix: https://github.com/miekg/dns/commit/43913f2f4fbd7dcff930b8a809e709591e4dd79e |