LOW

GHSA-3g4q-2f67-2gvh

netfoil has a resource leak in LRU cache

Details

### Summary When an entry was removed from the LRU cache, a pointer to the removed element was not properly cleaned up.

### Impact A local attacker can get netfoil to use more memory. By default this is limited to 100MB via systemd, which would trigger service restarts when reached.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/tinfoil-factory/netfoil

Introduced in: 0 Fixed in: 0.3.0

Fix go get github.com/tinfoil-factory/netfoil@v0.3.0

References

https://github.com/tinfoil-factory/netfoil/security/advisories/GHSA-3g4q-2f67-2gvh [WEB]
https://github.com/tinfoil-factory/netfoil [PACKAGE]