Merge pull request #14 from praetorian-inc/fix-oracle-plugin-crash

Added Length Check to Before Accessing Array
praetorian-inc · Feb 27, 2023 · 21ab57e · 21ab57e
2 parents db83d6c + 63f2e7c
commit 21ab57e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/plugins/services/oracledb/oracle.go b/pkg/plugins/services/oracledb/oracle.go
@@ -195,6 +195,11 @@ func isOracleDBRunning(response []byte) bool {
 		0x50, 0x3d, 0x29, 0x28, 0x56, 0x53, 0x4e, 0x4e,
 		0x55, 0x4d, 0x3d,
 	}
+
+	if len(response) < 27 {
+		return false
+	}
+
 	responseCode := int(response[4])
 
 	// This should always be a response code of 4 (rejection),