CVE-2013-10005.json

{
  "schema_version": "1.6.3",
  "id": "CVE-2013-10005",
  "modified": "2024-05-20T16:03:47Z",
  "published": "2021-04-14T20:04:52Z",
  "aliases": [
    "GO-2020-0024",
    "GHSA-gxgj-xjcw-fv9p"
  ],
  "related": [],
  "summary": "Infinite loop in github.com/btcsuite/go-socks. The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow. Los métodos RemoteAddr y LocalAddr en el net.Conn devuelto pueden llamarse a sí mismos, lo que genera un bucle infinito que bloqueará el programa debido a un desbordamiento de búfer en la región stack de la memoria",
  "details": "The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "7.5"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/btcsuite/go-socks"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.0.0-20130808000456-233bccbb1abe"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "imports": [
          {
            "path": "github.com/btcsuite/go-socks",
            "symbols": [
              "proxiedConn.LocalAddr",
              "proxiedConn.RemoteAddr"
            ]
          }
        ]
      }
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/btcsuitereleases/go-socks"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.0.0-20130808000456-233bccbb1abe"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "imports": [
          {
            "path": "github.com/btcsuitereleases/go-socks",
            "symbols": [
              "proxiedConn.LocalAddr",
              "proxiedConn.RemoteAddr"
            ]
          }
        ]
      }
    }
  ],
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/btcsuite/go-socks/commit/233bccbb1abe02f05750f7ace66f5bffdb13defc"
    },
    {
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2020-0024"
    }
  ],
  "credits": [],
  "database_specific": {
    "metrics": {
      "cvssMetricV31": [
        {
          "source": "nvd@nist.gov",
          "type": "Primary",
          "cvssData": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      ]
    },
    "cwe_details": [
      {
        "cwe_id": "CWE-835",
        "name": "Primary",
        "description": "",
        "source": "nvd@nist.gov",
        "url": ""
      }
    ],
    "repositories": [
      {
        "url": "https://github.com/btcsuite/go-socks",
        "name": "btcsuite/go-socks",
        "description": "SOCKS5 proxy library for Go",
        "date_created": "2013-07-25T17:32:44Z",
        "date_last_push": "2018-09-24T03:25:24Z",
        "owner": "btcsuite",
        "forks_count": "37",
        "stars_count": "24",
        "repo_language": "Go"
      }
    ],
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:socks5_project:socks5:*:*:*:*:*:go:*:*",
            "matchCriteriaId": "C0BC2021-1533-40FC-AA93-3B12B489CF8A",
            "versionEndExcluding": "2013-08-07"
          }
        ]
      }
    ],
    "vulndb_data": {
      "url": "https://pkg.go.dev/vuln/GO-2020-0024",
      "review_status": "REVIEWED"
    },
    "datasources": {
      "govuln": true,
      "nvd": true,
      "cvefixes": false
    }
  }
}