Skip to content

Commit

Permalink
data/reports: add aliases and vulnerable_at for GO-2020-0005.yaml
Browse files Browse the repository at this point in the history
For #5

Change-Id: I2d5ac25521088fc330c09a1881d30b349f962eef
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/444759
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Auto-Submit: Tatiana Bradley <tatiana@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
  • Loading branch information
tatianab authored and gopherbot committed Oct 21, 2022
1 parent 4c80490 commit eee3f21
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 1 deletion.
6 changes: 5 additions & 1 deletion data/osv/GO-2020-0005.json
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,8 @@
"modified": "0001-01-01T00:00:00Z",
"aliases": [
"CVE-2020-15106",
"CVE-2020-15112"
"CVE-2020-15112",
"GHSA-m332-53r6-2w93"
],
"details": "Malformed WALs can be constructed such that WAL.ReadAll can cause attempted\nout of bounds reads, or creation of arbitrarily sized slices, which may be used as\na DoS vector.\n",
"affected": [
Expand Down Expand Up @@ -34,6 +35,9 @@
{
"path": "go.etcd.io/etcd/wal",
"symbols": [
"Create",
"Repair",
"Verify",
"WAL.ReadAll",
"decoder.decodeRecord"
]
Expand Down
7 changes: 7 additions & 0 deletions data/reports/GO-2020-0005.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,16 @@ modules:
- module: go.etcd.io/etcd
versions:
- fixed: 0.5.0-alpha.5.0.20200423152442-f4b650b51dc4
vulnerable_at: 0.5.0-alpha.5.0.20200422225029-2369cb367873
packages:
- package: go.etcd.io/etcd/wal
symbols:
- WAL.ReadAll
- decoder.decodeRecord
derived_symbols:
- Create
- Repair
- Verify
description: |
Malformed WALs can be constructed such that WAL.ReadAll can cause attempted
out of bounds reads, or creation of arbitrarily sized slices, which may be used as
Expand All @@ -15,6 +20,8 @@ published: 2021-04-14T20:04:52Z
cves:
- CVE-2020-15106
- CVE-2020-15112
ghsas:
- GHSA-m332-53r6-2w93
credit: Trail of Bits
references:
- fix: https://github.com/etcd-io/etcd/pull/11793
Expand Down

0 comments on commit eee3f21

Please # to comment.