diff --git a/data/osv/GO-2023-1923.json b/data/osv/GO-2023-1923.json new file mode 100644 index 00000000..858fe3f0 --- /dev/null +++ b/data/osv/GO-2023-1923.json @@ -0,0 +1,65 @@ +{ + "schema_version": "1.3.1", + "id": "GO-2023-1923", + "modified": "0001-01-01T00:00:00Z", + "published": "0001-01-01T00:00:00Z", + "aliases": [ + "CVE-2019-14243", + "GHSA-85c5-ccm8-vr96" + ], + "summary": "Panic when handling invalid HAProxy PROXY v2 request in github.com/mastercactapus/proxyprotocol", + "details": "Panic when handling invalid HAProxy PROXY v2 request in github.com/mastercactapus/proxyprotocol", + "affected": [ + { + "package": { + "name": "github.com/mastercactapus/proxyprotocol", + "ecosystem": "Go" + }, + "ranges": [ + { + "type": "SEMVER", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.0.2" + } + ] + } + ], + "ecosystem_specific": { + "imports": [ + { + "path": "github.com/mastercactapus/proxyprotocol", + "symbols": [ + "Conn.LocalAddr", + "Conn.ProxyHeader", + "Conn.Read", + "Conn.RemoteAddr", + "Parse", + "parseV2" + ] + } + ] + } + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://github.com/advisories/GHSA-85c5-ccm8-vr96" + }, + { + "type": "REPORT", + "url": "https://github.com/mastercactapus/proxyprotocol/issues/1" + }, + { + "type": "FIX", + "url": "https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90ac" + } + ], + "database_specific": { + "url": "https://pkg.go.dev/vuln/GO-2023-1923" + } +} \ No newline at end of file diff --git a/data/reports/GO-2023-1923.yaml b/data/reports/GO-2023-1923.yaml new file mode 100644 index 00000000..1cd80068 --- /dev/null +++ b/data/reports/GO-2023-1923.yaml @@ -0,0 +1,27 @@ +id: GO-2023-1923 +modules: + - module: github.com/mastercactapus/proxyprotocol + versions: + - fixed: 0.0.2 + vulnerable_at: 0.0.1 + packages: + - package: github.com/mastercactapus/proxyprotocol + symbols: + - parseV2 + derived_symbols: + - Conn.LocalAddr + - Conn.ProxyHeader + - Conn.Read + - Conn.RemoteAddr + - Parse +summary: |- + Panic when handling invalid HAProxy PROXY v2 request in + github.com/mastercactapus/proxyprotocol +cves: + - CVE-2019-14243 +ghsas: + - GHSA-85c5-ccm8-vr96 +references: + - advisory: https://github.com/advisories/GHSA-85c5-ccm8-vr96 + - report: https://github.com/mastercactapus/proxyprotocol/issues/1 + - fix: https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90ac