GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

internal/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/boundary

Links

Open Source Insights

Directories ¶

Path	Synopsis
api
genapi command
auth
oidc
oidc/request
oidc/store
password
password/store
store
authtoken Package authtoken provides an authtoken with an encrypted value and an associated expiration time.	Package authtoken provides an authtoken with an encrypted value and an associated expiration time.
store
boundary Package boundary contains global interfaces and other definitions that define the Boundary domain.	Package boundary contains global interfaces and other definitions that define the Boundary domain.
cmd
base
base/internal/docker
base/logging
commands/accountscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/authenticate
commands/authmethodscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/authtokenscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/config
commands/connect
commands/credentiallibrariescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/credentialstorescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/database
commands/dev
commands/groupscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/hostcatalogscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/hostscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/hostsetscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/logout
commands/managedgroupscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/rolescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/scopescmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/server
commands/sessionscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/targetscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/userscmd Code generated by "make cli"; DO NOT EDIT.	Code generated by "make cli"; DO NOT EDIT.
commands/version
common
config
gencli command
credential Package credential defines interfaces shared by other packages that manage credentials for Boundary sessions.	Package credential defines interfaces shared by other packages that manage credentials for Boundary sessions.
store
vault Package vault provides access to credentials retrieved from a Vault server.	Package vault provides access to credentials retrieved from a Vault server.
vault/store
db
assert Package dbassert provides a set of assertions for testing the boundary database applications.	Package dbassert provides a set of assertions for testing the boundary database applications.
common common package contains functions from internal/db which need to be shared commonly with other packages that have a cyclic dependency on internal/db like internal/oplog.	common package contains functions from internal/db which need to be shared commonly with other packages that have a cyclic dependency on internal/db like internal/oplog.
db_test Package db_test provides some helper funcs for testing db integrations	Package db_test provides some helper funcs for testing db integrations
sanitize Package sanitize contains a set of functions that sanitizes input received from external systems before being persisted in the database.	Package sanitize contains a set of functions that sanitizes input received from external systems before being persisted in the database.
schema
schema/migrations/generate command
schema/postgres
sentinel Package sentinel allows for the use of Unicode non-characters to distinguish between Boundary defined sentinels and values provided by external systems.	Package sentinel allows for the use of Unicode non-characters to distinguish between Boundary defined sentinels and values provided by external systems.
timestamp
errors
filter
gen
controller/api
controller/api/services Package services is a reverse proxy.	Package services is a reverse proxy.
controller/servers/services
controller/tokens
testing/event Package event is a reverse proxy.	Package event is a reverse proxy.
host
static Package static provides a host, a host catalog, and a host set suitable for hosts with a static address.	Package static provides a host, a host catalog, and a host set suitable for hosts with a static address.
static/store
store
iam iam package is for identity access management of boundary.	iam package is for identity access management of boundary.
store
intglobals
kms
store
libs
alpnmux
observability
event
oplog oplog is a package for writing operational log (oplog) entries for the purpose of replication and verification of the data stored in the Boundary RDBMS.	oplog is a package for writing operational log (oplog) entries for the purpose of replication and verification of the data stored in the Boundary RDBMS.
oplog_test Package oplog_test provides some gorm helper funcs for testing oplog database integrations	Package oplog_test provides some gorm helper funcs for testing oplog database integrations
store Package store provides storage types/behavior for the oplog	Package store provides storage types/behavior for the oplog
perms Package perms provides the boundary permissions engine using grants which are tied to IAM Roles within a Scope.	Package perms provides the boundary permissions engine using grants which are tied to IAM Roles within a Scope.
proxy
requests
scheduler Package scheduler allows callers to register recurring jobs on the controller.	Package scheduler allows callers to register recurring jobs on the controller.
job Package job provides a Job and a Run struct suitable for persisting to the repository.	Package job provides a Job and a Run struct suitable for persisting to the repository.
job/store
servers
common
controller
controller/auth
controller/common Package common contains types and helper functions that are used across the different packages under internal/server/controller.	Package common contains types and helper functions that are used across the different packages under internal/server/controller.
controller/common/scopeids
controller/handlers
controller/handlers/accounts
controller/handlers/authmethods
controller/handlers/authtokens
controller/handlers/credentiallibraries
controller/handlers/credentialstores
controller/handlers/groups
controller/handlers/host_catalogs
controller/handlers/host_sets
controller/handlers/hosts
controller/handlers/managed_groups
controller/handlers/roles
controller/handlers/scopes
controller/handlers/sessions
controller/handlers/targets
controller/handlers/users
controller/handlers/workers
worker
worker/common Package common contains types and helper functions that are used across the different packages under internal/server/worker.	Package common contains types and helper functions that are used across the different packages under internal/server/worker.
worker/proxy Package proxy contains a collection of proxy handlers for the worker to call once a connection has been authorized.	Package proxy contains a collection of proxy handlers for the worker to call once a connection has been authorized.
worker/proxy/tcp
worker/session
session
target
store
tests
cluster
helper
types
action
resource
scope
subtypes Package subtypes provides helpers to work with boundary resource subtypes.	Package subtypes provides helpers to work with boundary resource subtypes.
ui
website
permstable command

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL