vulnerability

Amazon Linux 2023: CVE-2022-31394: Important priority package update for aws-nitro-enclaves-cli

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Feb 21, 2023
Added
Feb 17, 2025
Modified
Jul 9, 2025

Description

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

Solutions

amazon-linux-2023-upgrade-aws-nitro-enclaves-cliamazon-linux-2023-upgrade-aws-nitro-enclaves-cli-develamazon-linux-2023-upgrade-aws-nitro-enclaves-cli-integration-tests
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.