net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade golangUpgrade go-toolsetUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade delve | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade goUpgrade nomad | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golangUpgrade golang-raceUpgrade golang-testsUpgrade golang-miscUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Jul 4, 2022 | Jan 1, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Dec 16, 2021 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-testsUpgrade golang-raceUpgrade golangUpgrade golang-docsUpgrade golang-shared | Feb 17, 2025 | Dec 9, 2021 |
| Centos_linux | — | Upgrade delve-debuginfoUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade golang-srcUpgrade golang-binUpgrade delveUpgrade grafanaUpgrade golang-testsUpgrade golang-docsUpgrade go-toolset | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade golang-golang-x-netUpgrade golang-1.15 | Jan 24, 2022 | Jan 1, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Dec 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-binUpgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade go-toolsetUpgrade grafanaUpgrade golang-srcUpgrade delve | Dec 17, 2021 | Dec 9, 2021 |
| Redhat Openshift | — | Upgrade cri-oUpgrade butaneUpgrade ignitionUpgrade openshiftUpgrade containernetworking-plugins | Mar 11, 2022 | Dec 9, 2021 |
| Redhat_linux | — | Upgrade golang-docsUpgrade golang-raceUpgrade go-toolsetUpgrade grafanaUpgrade grafana-debuginfoUpgrade delveUpgrade golangUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-bin | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade grafanaUpgrade go-toolsetUpgrade golangUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade delve-debuginfoUpgrade delve | Mar 12, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade go1.16-docUpgrade go1.17Upgrade go1.16Upgrade go1.17-raceUpgrade go1.17-docUpgrade go1.16-race | Dec 25, 2021 | Dec 16, 2021 |
| Ubuntu | — | Upgrade google-guest-agent | Nov 19, 2024 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub