{"id":"GO-2020-0006","summary":"Denial of service via open idle connection in github.com/miekg/dns","details":"An attacker may prevent TCP connections to a Server by opening a connection and leaving it idle, until the connection is closed by the server no other connections will be accepted.","aliases":["CVE-2017-15133","GHSA-p55x-7x9v-q8m4"],"modified":"2024-05-20T16:03:47Z","published":"2021-04-14T20:04:52Z","database_specific":{"url":"https://pkg.go.dev/vuln/GO-2020-0006","review_status":"REVIEWED"},"references":[{"type":"FIX","url":"https://github.com/miekg/dns/pull/631"},{"type":"FIX","url":"https://github.com/miekg/dns/commit/43913f2f4fbd7dcff930b8a809e709591e4dd79e"}],"affected":[{"package":{"name":"github.com/miekg/dns","ecosystem":"Go","purl":"pkg:golang/github.com/miekg/dns"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.4-0.20180125103619-43913f2f4fbd"}]}],"ecosystem_specific":{"imports":[{"symbols":["ActivateAndServe","ListenAndServe","ListenAndServeTLS","Server.ActivateAndServe","Server.ListenAndServe","Server.serveTCP"],"path":"github.com/miekg/dns"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2020-0006.json"}}],"schema_version":"1.7.3","credits":[{"name":"Pedro Sampaio"}]}