GHSA-2h6c-j3gf-xp9r

Suggest an improvement
Source
https://github.com/advisories/GHSA-2h6c-j3gf-xp9r
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-2h6c-j3gf-xp9r/GHSA-2h6c-j3gf-xp9r.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-2h6c-j3gf-xp9r
Aliases
Published
2023-02-10T19:52:45Z
Modified
2026-09-10T03:49:51Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
IPFS go-bitfield vulnerable to DoS via malformed size arguments
Details

Impact

When feeding untrusted user input into the size parameter of NewBitfield and FromBytes functions, an attacker can trigger panics.

This happen when the size is a not a multiple of 8 or is negative. There were already a note in the NewBitfield documentation:

Panics if size is not a multiple of 8.

But it incomplete and missing from FromBytes's documentation.

This has been replaced by returning an (Bitfield, error) and returning a non nil error if the size is wrong.

Patches

Workarounds

  • Ensure size%8 == 0 && size >= 0 yourself before calling NewBitfield or FromBytes

References

Database specific 
{
    "cwe_ids":  [
        "CWE-1284",
        "CWE-754"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2023-02-10T19:52:45Z",
    "nvd_published_at":  "2023-02-09T21:15:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Go / github.com/ipfs/go-bitfield

Package

Name
github.com/ipfs/go-bitfield
View open source insights on deps.dev
Purl
pkg:golang/github.com/ipfs/go-bitfield

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-2h6c-j3gf-xp9r/GHSA-2h6c-j3gf-xp9r.json"