2022-09-28 17:00:34 +00:00
{
2022-12-08 20:00:36 +00:00
"data_version" : "4.0" ,
2022-09-28 17:00:34 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2022-41717" ,
2022-12-08 20:00:36 +00:00
"ASSIGNER" : "security@golang.org" ,
"STATE" : "PUBLIC"
2022-09-28 17:00:34 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2022-12-08 20:00:36 +00:00
"value" : "An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE 400: Uncontrolled Resource Consumption"
}
]
}
]
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Go standard library" ,
"product" : {
"product_data" : [
{
"product_name" : "net/http" ,
"version" : {
"version_data" : [
{
2023-06-08 21:00:40 +00:00
"version_affected" : "<" ,
"version_name" : "0" ,
"version_value" : "1.18.9"
2022-12-08 20:00:36 +00:00
} ,
{
2023-06-08 21:00:40 +00:00
"version_affected" : "<" ,
"version_name" : "1.19.0-0" ,
"version_value" : "1.19.4"
2022-12-08 20:00:36 +00:00
}
]
}
}
]
}
} ,
{
"vendor_name" : "golang.org/x/net" ,
"product" : {
"product_data" : [
{
"product_name" : "golang.org/x/net/http2" ,
"version" : {
"version_data" : [
{
2023-06-08 21:00:40 +00:00
"version_affected" : "<" ,
"version_name" : "0" ,
"version_value" : "0.4.0"
2022-12-08 20:00:36 +00:00
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://go.dev/issue/56350" ,
"refsource" : "MISC" ,
"name" : "https://go.dev/issue/56350"
} ,
{
"url" : "https://go.dev/cl/455717" ,
"refsource" : "MISC" ,
"name" : "https://go.dev/cl/455717"
} ,
{
"url" : "https://go.dev/cl/455635" ,
"refsource" : "MISC" ,
"name" : "https://go.dev/cl/455635"
} ,
2023-06-08 21:00:40 +00:00
{
"url" : "https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ" ,
"refsource" : "MISC" ,
"name" : "https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ"
} ,
2022-12-08 20:00:36 +00:00
{
"url" : "https://pkg.go.dev/vuln/GO-2022-1144" ,
"refsource" : "MISC" ,
"name" : "https://pkg.go.dev/vuln/GO-2022-1144"
2023-07-04 03:00:38 +00:00
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD/"
2023-07-25 19:00:36 +00:00
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522/"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR/"
2023-09-05 03:00:33 +00:00
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP/"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT/"
2023-09-07 03:00:33 +00:00
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS/"
2022-09-28 17:00:34 +00:00
}
]
2022-12-08 20:00:36 +00:00
} ,
"credits" : [
{
"lang" : "en" ,
"value" : "Josselin Costanzi"
}
]
2022-09-28 17:00:34 +00:00
}
