shiyanhui/dht vulnerable to Uncontrolled Resource Consumption · CVE-2020-36562 · GitHub Advisory Database · GitHub

shiyanhui/dht vulnerable to Uncontrolled Resource Consumption

High severity GitHub Reviewed Published Dec 28, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

github.com/shiyanhui/dht (Go)

Affected versions

<= 0.0.0-20201219151056-5a20f3199263

Patched versions

None

Description

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector.

References

Published by the National Vulnerability Database

Dec 28, 2022

Published to the GitHub Advisory Database Dec 28, 2022

Reviewed Dec 30, 2022

Last updated Feb 3, 2023

Severity

High

7.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H