GO-2024-3335: Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary

globals

package

v0.3.0 Latest Latest Go to latest Published: Jun 8, 2021 License: MPL-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/boundary

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	IdField                          = "id"
	VersionField                     = "version"
	NameField                        = "name"
	DescriptionField                 = "description"
	CreatedTimeField                 = "created_time"
	UpdatedTimeField                 = "updated_time"
	TypeField                        = "type"
	AttributesField                  = "attributes"
	ScopeIdField                     = "scope_id"
	ScopeField                       = "scope"
	AuthMethodIdField                = "auth_method_id"
	AccountIdField                   = "account_id"
	UserIdField                      = "user_id"
	IsPrimaryField                   = "is_primary"
	AuthorizedActionsField           = "authorized_actions"
	AuthorizedCollectionActionsField = "authorized_collection_actions"
	ExpirationTimeField              = "expiration_time"
	ApproximateLastUsedTimeField     = "approximate_last_used_time"
	MembersField                     = "members"
	MemberIdsField                   = "member_ids"
	HostCatalogIdField               = "host_catalog_id"
	HostSetIdsField                  = "host_set_ids"
	HostIdsField                     = "host_ids"
	PrincipalIdsField                = "principal_ids"
	PrincipalsField                  = "principals"
	GrantScopeIdField                = "grant_scope_id"
	GrantsField                      = "grants"
	GrantStringsField                = "grant_strings"
	PrimaryAuthMethodId              = "primary_auth_method_id"
	TargetIdField                    = "target_id"
	HostIdField                      = "host_id"
	HostSetIdField                   = "host_set_id"
	HostSetsField                    = "host_sets"
	AuthTokenIdField                 = "auth_token_id"
	EndpointField                    = "endpoint"
	CertificateField                 = "certificate"
	TerminationReasonField           = "termination_reason"
	StatusField                      = "status"
	StatesField                      = "states"
	SessionConnectionLimitField      = "session_connection_limit"
	SessionMaxSecondsField           = "session_max_seconds"
	WorkerFilterField                = "worker_filter"
	AccountIdsField                  = "account_ids"
	AccountsField                    = "accounts"
	LoginNameField                   = "login_name"
	FullNameField                    = "full_name"
	PrimaryAccountIdField            = "primary_account_id"
	EmailField                       = "email"
	ManagedGroupIdsField             = "managed_group_ids"
	FilterField                      = "filter"
)

View Source

const (
	TcpProxyV1     = "boundary-tcp-proxy-v1"
	ServiceTokenV1 = "s1"
)

Variables ¶

View Source

var (
	// DefaultMaxRequestDuration is the amount of time we'll wait for a request
	DefaultMaxRequestDuration = 90 * time.Second

	// DefaultMaxRequestSize is the maximum size of a request we allow by default
	DefaultMaxRequestSize = int64(1024 * 1024)

	// ContextMaxRequestSizeTypeKey is a value to keep linters from complaining
	// about clashing string identifiers
	ContextMaxRequestSizeTypeKey ContextMaxRequestSizeType

	// ContextOriginalRequestPathTypeKey is a value to keep linters from complaining
	// about clashing string identifiers
	ContextOriginalRequestPathTypeKey ContextOriginalRequestPathType

	// RecoveryTokenValidityPeriod is exported so we can modify it in tests if
	// we want
	RecoveryTokenValidityPeriod = 5 * time.Minute
)

Functions ¶

This section is empty.

Types ¶

type ContextMaxRequestSizeType ¶

type ContextMaxRequestSizeType struct{}

type ContextOriginalRequestPathType ¶

type ContextOriginalRequestPathType struct{}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL