Skip to content
OpenAdvisories

Package · Go

github.com/tinfoil-factory/netfoil

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-4ph6-mjv7-3fq6

    netfoil vulnerable to improper handling of untrusted DoH response data

    ### Summary HTTPS RR data returned from the DoH server was not properly handled. Unverified APLN data (which could contain arbitrary byte sequences) was written directly to the log. It could also cause unnecessary memory usage. The single-byte response code w…

    github.com/tinfoil-factory/netfoil Go
  • Low —
    GHSA-7856-g3gv-9wq8

    netfoil: Attacker controlled data written to logs

    ### Summary Domain names were written to the log without first being validated to contain allowed characters. ### Impact Depends on how the logs were used.

    github.com/tinfoil-factory/netfoil Go
  • Low —
    GHSA-3g4q-2f67-2gvh

    netfoil has a resource leak in LRU cache

    ### Summary When an entry was removed from the LRU cache, a pointer to the removed element was not properly cleaned up. ### Impact A local attacker can get netfoil to use more memory. By default this is limited to 100MB via systemd, which would trigger servic…

    github.com/tinfoil-factory/netfoil Go