GHSA-m7gr-5w5g-36jf
Suggest an improvement- Source
- https://github.com/advisories/GHSA-m7gr-5w5g-36jf
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/07/GHSA-m7gr-5w5g-36jf/GHSA-m7gr-5w5g-36jf.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-m7gr-5w5g-36jf
- Aliases
- Related
- Withdrawn
- 2024-05-06T14:22:01Z
- Published
- 2022-07-23T00:00:22Z
- Modified
- 2026-02-04T02:30:04.534037Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service
- Details
-
Withdrawn Advisory
This advisory has been withdrawn because it is a bug, not a vulnerability. According to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server.
Original Description
An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.
- Database specific
{ "github_reviewed": true, "severity": "HIGH", "github_reviewed_at": "2022-07-27T22:12:07Z", "nvd_published_at": "2022-07-22T15:15:00Z", "cwe_ids": [ "CWE-125" ] }- References
Affected packages
Go / github.com/caddyserver/caddy
Package
- Name
- github.com/caddyserver/caddy
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/caddyserver/caddy