russellhaering/gosaml2 · Security
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
- GHSA ID
- GHSA-prjq-f4q3-fvfr
- CVE ID
- CVE-2020-7731
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Impact
In versions prior to v0.7.0 it was possible for an attacker to supply an invalid assertion which would trigger a panic due to a nil-pointer dereference.
Patches
The issue was patched in v0.7.0, released on March 2, 2022.
Workarounds
Callers to gosaml2 can use recover() to handle panics to mitigate a potential DoS.
References
See issue #59 for details.
CWEs
- CWE-476 · NULL Pointer Dereference
References
- https://github.com/russellhaering/gosaml2/security/advisories/GHSA-prjq-f4q3-fvfr ↗
- https://github.com/russellhaering/gosaml2/issues/59 ↗
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOSAML2-608302 ↗
- https://github.com/russellhaering/goxmldsig/issues/48 ↗
- https://github.com/russellhaering/gosaml2/pull/90 ↗
- https://github.com/russellhaering/gosaml2/commit/66e3b7affd622b8b24ea1e18845f045e46b23424 ↗
- https://github.com/russellhaering/gosaml2/releases/tag/v0.7.0 ↗
- https://github.com/advisories/GHSA-prjq-f4q3-fvfr ↗