NetSight
high7.5

CVE-2013-10005

socks Infinite Loop vulnerability

Impact

The `RemoteAddr` and `LocalAddr` methods on the returned `net.Conn` may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

Affected packages

EcosystemPackageAffectedFixed in
gogithub.com/btcsuite/go-socks< 0.0.0-20130808000456-233bccbb1abe0.0.0-20130808000456-233bccbb1abe
gogithub.com/btcsuitereleases/go-socks< 0.0.0-20130808000456-233bccbb1abe0.0.0-20130808000456-233bccbb1abe

Affected products

VendorProductAffected versions
Socks5 ProjectSocks5
before 2013-08-07

Weakness classification

References