Skip to content
OpenAdvisories
High · 7.5 CVE-2013-10005 EUVD-2022-7640GHSA-gxgj-xjcw-fv9pGO-2020-0024

Infinite loop in github.com/btcsuite/go-socks

Published Dec 27, 2022 · Updated Apr 11, 2025 · Assigned by Go

Description

The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.

Affected products

VendorProductAffectedFixed
github.com/btcsuite/go-socks github.com/btcsuite/go-socks < 0.0.0-20130808000456-233bccbb1abe 0.0.0-20130808000456-233bccbb1abe
github.com/btcsuitereleases/go-socks github.com/btcsuitereleases/go-socks < 0.0.0-20130808000456-233bccbb1abe 0.0.0-20130808000456-233bccbb1abe

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/btcsuite/go-socks < 0.0.0-20130808000456-233bccbb1abe 0.0.0-20130808000456-233bccbb1abe GHSA-gxgj-xjcw-fv9p
Go github.com/btcsuitereleases/go-socks < 0.0.0-20130808000456-233bccbb1abe 0.0.0-20130808000456-233bccbb1abe GHSA-gxgj-xjcw-fv9p

References