Debian/golang-github-pires-go-proxyproto: medium 4.9
The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.
Action: Upgrade golang-github-pires-go-proxyproto to 0.4.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.2-1 | - |
Fixed versions
| 0.4.2-1 |
Sources
- osv: DEBIAN-CVE-2021-23351#Debian:13/golang-github-pires-go-proxyproto
- https://security-tracker.debian.org/tracker/CVE-2021-23351
published · modified · JSON