Denial Of Service(DoS)

2021-03-0902:55:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github.com/pires/go-proxyproto

vulnerability

parseversion1

denial of service

memory exhaustion

EPSS

0.002

Percentile

51.7%

JSON

github.com/pires/go-proxyproto is vulnerable to denial of service (DoS). The vulnerability exists as the function parseVersion1 does not restrict parsing of data until it founds a newline or target stops acknowledging, allowing an attacker to send malicious proxy protocol V1 header to cause a memory exhaustion.