id: GO-2020-0006
modules:
    - module: github.com/miekg/dns
      versions:
        - fixed: 1.0.4-0.20180125103619-43913f2f4fbd
      vulnerable_at: 1.0.3
      packages:
        - package: github.com/miekg/dns
          symbols:
            - Server.serveTCP
          derived_symbols:
            - ActivateAndServe
            - ListenAndServe
            - ListenAndServeTLS
            - Server.ActivateAndServe
            - Server.ListenAndServe
summary: Denial of service via open idle connection in github.com/miekg/dns
description: |-
    An attacker may prevent TCP connections to a Server by opening a connection and
    leaving it idle, until the connection is closed by the server no other
    connections will be accepted.
published: 2021-04-14T20:04:52Z
cves:
    - CVE-2017-15133
ghsas:
    - GHSA-p55x-7x9v-q8m4
credits:
    - Pedro Sampaio
references:
    - fix: https://github.com/miekg/dns/pull/631
    - fix: https://github.com/miekg/dns/commit/43913f2f4fbd7dcff930b8a809e709591e4dd79e