The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in the code, a deliberately malformed V1 header could be used to exhaust memory in a server process using this code - and create a DoS. This can be exploited by sending a stream starting with PROXY and continuing to send data (which does not contain a newline) until the target stops acknowledging. The risk here is small, because only trusted sources should be allowed to send proxy protocol headers.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the     parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It     will read from the connection until it finds a newline. Since no limits are implemented in the code, a     deliberately malformed V1 header could be used to exhaust memory in a server process using this code - and     create a DoS. This can be exploited by sending a stream starting with PROXY and continuing to send data     (which does not contain a newline) until the target stops acknowledging. The risk here is small, because     only trusted sources should be allowed to send proxy protocol headers. (CVE-2021-23351)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the
    parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It
    will read from the connection until it finds a newline. Since no limits are implemented in the code, a
    deliberately malformed V1 header could be used to exhaust memory in a server process using this code - and
    create a DoS. This can be exploited by sending a stream starting with PROXY and continuing to send data
    (which does not contain a newline) until the target stops acknowledging. The risk here is small, because
    only trusted sources should be allowed to send proxy protocol headers. (CVE-2021-23351)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e01c1fe4cc advisory.

  - The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the     parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It     will read from the connection until it finds a newline. Since no limits are implemented in the code, a     deliberately malformed V1 header could be used to exhaust memory in a server process using this code - and     create a DoS. This can be exploited by sending a stream starting with PROXY and continuing to send data     (which does not contain a newline) until the target stops acknowledging. The risk here is small, because     only trusted sources should be allowed to send proxy protocol headers. (CVE-2021-23351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
256972	Linux Distros Unpatched Vulnerability : CVE-2021-23351	Nessus	Misc.	Local	medium
414650	SCA: security update for github.com/pires/go-proxyproto (GHSA-fqh4-rh59-xhvf)	Tenable Cloud Security	SCA Checks	Local	medium
414650	SCA: security update for github.com/pires/go-proxyproto (GHSA-fqh4-rh59-xhvf)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
147847	Fedora 33 : golang-github-pires-proxyproto (2021-e01c1fe4cc)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2021-23351

medium

Tenable Plugins

medium

medium

medium

medium