blob: 6314c281337538a3c3d93854dc854e07ba9c98d5 [file] [log] [blame]
id: GO-2023-1923
modules:
- module: github.com/mastercactapus/proxyprotocol
versions:
- fixed: 0.0.2
vulnerable_at: 0.0.1
packages:
- package: github.com/mastercactapus/proxyprotocol
symbols:
- parseV2
derived_symbols:
- Conn.LocalAddr
- Conn.ProxyHeader
- Conn.Read
- Conn.RemoteAddr
- Parse
summary: |-
Panic when handling invalid HAProxy PROXY v2 request in
github.com/mastercactapus/proxyprotocol
cves:
- CVE-2019-14243
ghsas:
- GHSA-85c5-ccm8-vr96
references:
- advisory: https://github.com/advisories/GHSA-85c5-ccm8-vr96
- report: https://github.com/mastercactapus/proxyprotocol/issues/1
- fix: https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90ac
review_status: REVIEWED