Skip to content
OpenAdvisories
High USN-6208-1 1 CVE

golang-websocket vulnerability

Published Jul 6, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Gorilla WebSocket incorrectly handled decoding WebSocket
frames. An attacker could possibly use this issue to cause a crash, resulting
in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS golang-websocket 0.0~git20150811.0.b6ab76f-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS golang-websocket 1.2.0-1ubuntu2+esm1

Vulnerabilities 1

  • High 7.5
    CVE-2020-27813

    Integer overflow in github.com/gorilla/websocket

    An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

    github.com/gorilla/websocket golang-websocket Ubuntu Go

References

  • report
    https://ubuntu.com/security/CVE-2020-27813