| id: GO-2023-1923 |
| modules: |
| - module: github.com/mastercactapus/proxyprotocol |
| versions: |
| - fixed: 0.0.2 |
| vulnerable_at: 0.0.1 |
| packages: |
| - package: github.com/mastercactapus/proxyprotocol |
| symbols: |
| - parseV2 |
| derived_symbols: |
| - Conn.LocalAddr |
| - Conn.ProxyHeader |
| - Conn.Read |
| - Conn.RemoteAddr |
| - Parse |
| summary: |- |
| Panic when handling invalid HAProxy PROXY v2 request in |
| github.com/mastercactapus/proxyprotocol |
| cves: |
| - CVE-2019-14243 |
| ghsas: |
| - GHSA-85c5-ccm8-vr96 |
| references: |
| - advisory: https://github.com/advisories/GHSA-85c5-ccm8-vr96 |
| - report: https://github.com/mastercactapus/proxyprotocol/issues/1 |
| - fix: https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90ac |
| review_status: REVIEWED |
