GitHub Advisoryadvisory · Go

GHSA-85c5-ccm8-vr96 mastercactapus proxyprotocol vulnerable to denial of service

HIGH Published 2022-05-24 Modified 2023-08-25 Official page ↗
Aliases
CVE-2019-14243
Ecosystem
Go
Packages
github.com/mastercactapus/proxyprotocol
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2023-07-14

Affected packages

• Go github.com/mastercactapus/proxyprotocol: < 0.0.2 → fixed in 0.0.2

Description

headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data.

Related

Alias · CVE (1)

  • CVE-2019-14243 headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy,… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References