net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade delveUpgrade golang-raceUpgrade golang-testsUpgrade grafanaUpgrade go-toolsetUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golang | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade goUpgrade nomad | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Jul 4, 2022 | Jan 1, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 29, 2022 | Dec 16, 2021 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-raceUpgrade golang-miscUpgrade golang-docsUpgrade golang-shared | Feb 17, 2025 | Dec 9, 2021 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade golangUpgrade golang-raceUpgrade golang-srcUpgrade delve-debuginfoUpgrade golang-miscUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-docsUpgrade go-toolsetUpgrade golang-testsUpgrade grafanaUpgrade delve | Dec 16, 2021 | Dec 15, 2021 |
| Debian | — | Upgrade golang-golang-x-netUpgrade golang-1.15 | Jan 24, 2022 | Jan 1, 2022 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Dec 9, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade delveUpgrade golang-srcUpgrade grafanaUpgrade go-toolsetUpgrade golang-testsUpgrade golang-miscUpgrade golang-docsUpgrade golang-binUpgrade golang-raceUpgrade golang | Dec 17, 2021 | Dec 9, 2021 |
| Redhat Openshift | — | Upgrade cri-oUpgrade openshiftUpgrade butaneUpgrade ignitionUpgrade containernetworking-plugins | Mar 11, 2022 | Dec 9, 2021 |
| Redhat_linux | — | Upgrade delveUpgrade grafanaUpgrade go-toolsetUpgrade grafana-debuginfoUpgrade golang-raceUpgrade golang-docsUpgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-misc | Dec 16, 2021 | Dec 15, 2021 |
| Rocky_linux | — | Upgrade golang-raceUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade delveUpgrade golang-binUpgrade grafana-debuginfoUpgrade golangUpgrade go-toolsetUpgrade grafana | Mar 12, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.16Upgrade go1.16-raceUpgrade go1.17-raceUpgrade go1.16-docUpgrade go1.17 | Dec 25, 2021 | Dec 16, 2021 |
| Ubuntu | — | Upgrade google-guest-agent | Nov 19, 2024 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub