Skip to content

Commit eee3f21

Browse files
tatianabgopherbot
authored andcommitted
data/reports: add aliases and vulnerable_at for GO-2020-0005.yaml
For #5 Change-Id: I2d5ac25521088fc330c09a1881d30b349f962eef Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/444759 Reviewed-by: Tatiana Bradley <[email protected]> Reviewed-by: Damien Neil <[email protected]> Auto-Submit: Tatiana Bradley <[email protected]> TryBot-Result: Gopher Robot <[email protected]> Run-TryBot: Tatiana Bradley <[email protected]>
1 parent 4c80490 commit eee3f21

File tree

2 files changed

+12
-1
lines changed

2 files changed

+12
-1
lines changed

data/osv/GO-2020-0005.json

+5-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,8 @@
44
"modified": "0001-01-01T00:00:00Z",
55
"aliases": [
66
"CVE-2020-15106",
7-
"CVE-2020-15112"
7+
"CVE-2020-15112",
8+
"GHSA-m332-53r6-2w93"
89
],
910
"details": "Malformed WALs can be constructed such that WAL.ReadAll can cause attempted\nout of bounds reads, or creation of arbitrarily sized slices, which may be used as\na DoS vector.\n",
1011
"affected": [
@@ -34,6 +35,9 @@
3435
{
3536
"path": "go.etcd.io/etcd/wal",
3637
"symbols": [
38+
"Create",
39+
"Repair",
40+
"Verify",
3741
"WAL.ReadAll",
3842
"decoder.decodeRecord"
3943
]

data/reports/GO-2020-0005.yaml

+7
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,16 @@ modules:
22
- module: go.etcd.io/etcd
33
versions:
44
- fixed: 0.5.0-alpha.5.0.20200423152442-f4b650b51dc4
5+
vulnerable_at: 0.5.0-alpha.5.0.20200422225029-2369cb367873
56
packages:
67
- package: go.etcd.io/etcd/wal
78
symbols:
89
- WAL.ReadAll
910
- decoder.decodeRecord
11+
derived_symbols:
12+
- Create
13+
- Repair
14+
- Verify
1015
description: |
1116
Malformed WALs can be constructed such that WAL.ReadAll can cause attempted
1217
out of bounds reads, or creation of arbitrarily sized slices, which may be used as
@@ -15,6 +20,8 @@ published: 2021-04-14T20:04:52Z
1520
cves:
1621
- CVE-2020-15106
1722
- CVE-2020-15112
23+
ghsas:
24+
- GHSA-m332-53r6-2w93
1825
credit: Trail of Bits
1926
references:
2027
- fix: https://github.com/etcd-io/etcd/pull/11793

0 commit comments

Comments
 (0)