Log in Start free

Vulnerability · Published Jul 18, 2023 · Assigned by mitre

CVE-2023-37788

High 7.5

In plain English

A high-severity security flaw in the golang-github-elazarl-goproxy package (Debian). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.0%top 37.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12golang-github-elazarl-goproxyno fix listedDEBIAN-CVE-2023-37788
Debian:13golang-github-elazarl-goproxy1.1+git20231117.7cc037d+dfsg-1DEBIAN-CVE-2023-37788
Debian:14golang-github-elazarl-goproxy1.1+git20231117.7cc037d+dfsg-1DEBIAN-CVE-2023-37788
Gogithub.com/elazarl/goproxy0.0.0-20230731152917-f99041a5c027GHSA-4r8x-2p26-976p
Gogithub.com/elazarl/goproxy0.0.0-20230731152917-f99041a5c027GO-2023-1941
Ubuntu:22.04:LTSgolang-github-elazarl-goproxyno fix listedUBUNTU-CVE-2023-37788
Ubuntu:24.04:LTSgolang-github-elazarl-goproxyno fix listedUBUNTU-CVE-2023-37788
Ubuntu:25.10golang-github-elazarl-goproxyno fix listedUBUNTU-CVE-2023-37788
Ubuntu:26.04:LTSgolang-github-elazarl-goproxyno fix listedUBUNTU-CVE-2023-37788
Ubuntu:26.10golang-github-elazarl-goproxyno fix listedUBUNTU-CVE-2023-37788

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References