CVE-2013-10005
Infinite loop in github.com/btcsuite/go-socks
CVE-2013-10005 is a high vulnerability (CVSS 7.5) in Github.com/btcsuite/go-socks, published April 14, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 58th percentile. Fixed in github.com/btcsuite/go-socks 0.0.0-20130808000456-233bccbb1abe.
- Severity
- 7.5 HighCVSS 3.1, NVD
- Exploit chance
- 0.83%EPSS, 58th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.0.0-20130808000456-233bccbb1abegithub.com/btcsuite/go-socks +1 more
Description
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/btcsuite/go-socksGo | before 0.0.0-20130808000456-233bccbb1abe | 0.0.0-20130808000456-233bccbb1abe |
github.com/btcsuitereleases/go-socksGo | before 0.0.0-20130808000456-233bccbb1abe | 0.0.0-20130808000456-233bccbb1abe |
What each source reports
NVD Score used
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
- Record
CVE-2013-10005- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List
Infinite loop in github.com/btcsuite/go-socks
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
- Record
CVE-2013-10005- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2022-7640
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
- Record
EUVD-2022-7640- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gxgj-xjcw-fv9p
socks Infinite Loop vulnerability
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
- Record
GHSA-gxgj-xjcw-fv9p- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVGHSA-gxgj-xjcw-fv9p
socks Infinite Loop vulnerability
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
- Record
GHSA-gxgj-xjcw-fv9p- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVGO-2020-0024No score
Infinite loop in github.com/btcsuite/go-socks
The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow.
- Record
GO-2020-0024- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.