HIGH 7.5
GHSA-ghrq-5wpp-hxx5
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
Quick fix
GHSA-ghrq-5wpp-hxx5 — github.com/pterodactyl/wings: upgrade to the fixed version with the command below.
go get github.com/pterodactyl/wings@v1.13.0Details
### Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic.
### Impact All wings users with an open SFTP port.
### Workarounds Close SFTP port.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/pterodactyl/wings
Introduced in:
0 Fixed in: 1.13.0 Fix
go get github.com/pterodactyl/wings@v1.13.0