CVE-2021-23409

Published: Jul 21, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The package github.com/pires/go-proxyproto before 0.6.0 are vulnerable to Denial of Service (DoS) via creating connections without the proxy protocol header.

Affected (1)

Products: Go Proxyproto Project: Go Proxyproto

Go Proxyproto Project

1 product

Go Proxyproto

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Go Proxyproto Project Go Proxyproto	Before 0.6.0

References (10)

https://github.com/pires/go-proxyproto/issues/65

Source: report@snyk.io

Issue TrackingThird Party Advisory

https://github.com/pires/go-proxyproto/pull/74

Source: report@snyk.io

PatchThird Party Advisory

https://github.com/pires/go-proxyproto/pull/74/commits/cdc63867da24fc609b727231f682670d0d1cd346

Source: report@snyk.io

PatchThird Party Advisory

https://github.com/pires/go-proxyproto/releases/tag/v0.6.0

Source: report@snyk.io

Release NotesThird Party Advisory

https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1316439

Source: report@snyk.io

PatchThird Party Advisory

https://github.com/pires/go-proxyproto/issues/65