vulnerability

Red Hat OpenShift: CVE-2021-44716: golang: net/http: limit growth of header canonicalization cache

Name: Red Hat OpenShift: CVE-2021-44716: golang: net/http: limit growth of header canonicalization cache
Creator: Red Hat
Published: 2022-01-01T00:00:00.000Z
Keywords: CVE, CWE-400, Red Hat OpenShift, 2021, 44716, golang, linuxrpm-upgrade-butane, linuxrpm-upgrade-containernetworking-plugins, linuxrpm-upgrade-cri-o, linuxrpm-upgrade-ignition, linuxrpm-upgrade-openshift, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

Jan 1, 2022

Added

Mar 11, 2022

Modified

Mar 30, 2026

Description

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Solutions

linuxrpm-upgrade-butanelinuxrpm-upgrade-containernetworking-pluginslinuxrpm-upgrade-cri-olinuxrpm-upgrade-ignitionlinuxrpm-upgrade-openshift

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report