net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade golang-docsUpgrade delveUpgrade golang-raceUpgrade go-toolsetUpgrade golangUpgrade grafanaUpgrade golang-binUpgrade golang-srcUpgrade golang-misc | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade goUpgrade nomad | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-raceUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | Jul 4, 2022 | Jan 1, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Dec 16, 2021 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang-tests | Feb 17, 2025 | Dec 9, 2021 |
| Centos_linux | — | Upgrade golang-srcUpgrade golang-miscUpgrade delve-debugsourceUpgrade golangUpgrade delve-debuginfoUpgrade golang-raceUpgrade grafana-debuginfoUpgrade grafanaUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade go-toolsetUpgrade delve | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade golang-golang-x-netUpgrade golang-1.15 | Jan 24, 2022 | Jan 1, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Dec 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade golang-srcUpgrade grafanaUpgrade delveUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-misc | Dec 17, 2021 | Dec 9, 2021 |
| Redhat Openshift | — | Upgrade openshiftUpgrade cri-oUpgrade butaneUpgrade ignitionUpgrade containernetworking-plugins | Mar 11, 2022 | Dec 9, 2021 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade grafanaUpgrade golang-docsUpgrade delveUpgrade golang-raceUpgrade grafana-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade golang-srcUpgrade delve-debugsourceUpgrade golang-miscUpgrade delve-debuginfo | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade grafanaUpgrade golangUpgrade go-toolsetUpgrade golang-binUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade delveUpgrade grafana-debuginfoUpgrade golang-race | Mar 12, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade go1.17Upgrade go1.16-docUpgrade go1.16Upgrade go1.16-raceUpgrade go1.17-raceUpgrade go1.17-doc | Dec 25, 2021 | Dec 16, 2021 |
| Ubuntu | — | Upgrade google-guest-agent | Nov 19, 2024 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub