socks Infinite Loop vulnerability

HOCH 7.5CVE-2013-10005 · GHSA-gxgj-xjcw-fv9p · GO-2020-0024 · Published 27/12/2022 · updated 16/06/2026

Kurz gesagt

CVE-2013-10005 ist eine Schwachstelle (HOCH (CVSS 7.5)) in github.com/btcsuite/go-socks, github.com/btcsuitereleases/go-socks, socks5 (socks5 project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.83%, höher als bei 57.9% aller Schwachstellen.
Abhilfe: auf 0.0.0-20130808000456-233bccbb1abe, 2013-08-07 oder neuer aktualisieren.

Package	Affected versions	Patched versions
github.com/btcsuite/go-socks Go	`< 0.0.0-20130808000456-233bccbb1abe`	`0.0.0-20130808000456-233bccbb1abe`
github.com/btcsuitereleases/go-socks Go	`< 0.0.0-20130808000456-233bccbb1abe`	`0.0.0-20130808000456-233bccbb1abe`
socks5 socks5_project	`< 2013-08-07`	`2013-08-07`

Description

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

NVD description

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

References

nvd.nist.gov/vuln/detail/CVE-2013-10005 · ADVISORY
btcsuite/go-socks commit 233bccb · WEB
btcsuite/go-socks · PACKAGE
pkg.go.dev/vuln/GO-2020-0024 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free