Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS2-2023-2192
HistoryAug 03, 2023 - 6:10 p.m.

Important: cni-plugins

2023-08-0318:10:00
alas.aws.amazon.com
11

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Issue Overview:

http2/hpack: avoid quadratic complexity in hpack decoding (CVE-2022-41723)

Affected Packages:

cni-plugins

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update cni-plugins to update your system.

New Packages:

aarch64:  
    cni-plugins-1.2.0-1.amzn2.0.2.aarch64  
    cni-plugins-debuginfo-1.2.0-1.amzn2.0.2.aarch64  
  
src:  
    cni-plugins-1.2.0-1.amzn2.0.2.src  
  
x86_64:  
    cni-plugins-1.2.0-1.amzn2.0.2.x86_64  
    cni-plugins-debuginfo-1.2.0-1.amzn2.0.2.x86_64

Additional References

Red Hat: CVE-2022-41723

Mitre: CVE-2022-41723

Related

nessus 69
redos 1
ubuntucve 1
openvas 33
cbl_mariner 5
fedora 16
ibm 20
osv 6
redhatcve 2
debiancve 1
prion 1
alpinelinux 1
cve 1
veracode 2
amazon 10
github 1
redhat 18
cgr 1
gitlab 1
wolfi 1
altlinux 1
mageia 1
freebsd 1
photon 2
oraclelinux 1
almalinux 2
nessus
nessus
RHEL 8 : rhc (RHSA-2023:7058)
2023-11-14 00:00:00
Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2023-337)
2023-09-08 00:00:00
Amazon Linux AMI : docker (ALAS-2023-1881)
2023-11-03 00:00:00
redos
redos
ROS-20231030-04
2023-10-30 00:00:00
ubuntucve
ubuntucve
CVE-2022-41723
2023-02-28 00:00:00
openvas
openvas
Fedora: Security Advisory for golang-github-cli-crypto (FEDORA-2023-cb20f08a4e)
2023-04-21 00:00:00
Fedora: Security Advisory for golang-github-cenkalti-backoff (FEDORA-2023-cb20f08a4e)
2023-04-21 00:00:00
Fedora: Security Advisory for golang-github-cli-gh (FEDORA-2023-cb20f08a4e)
2023-04-21 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41723 affecting package telegraf for versions less than 1.26.0-2
2023-04-16 01:05:11
CVE-2022-41723 affecting package kubevirt for versions less than 1.2.0-1
2024-04-17 22:02:46
CVE-2022-41723 affecting package kubevirt for versions less than 0.59.0-15
2024-03-21 08:09:05
fedora
fedora
[SECURITY] Fedora 37 Update: golang-github-cenkalti-backoff-4.2.0-2.fc37
2023-04-20 02:54:37
[SECURITY] Fedora 37 Update: golang-github-cli-oauth-1.0.1-2.fc37
2023-04-20 02:54:37
[SECURITY] Fedora 37 Update: golang-github-cli-crypto-0-0.2.20230331git6be313f.fc37
2023-04-20 02:54:37
ibm
ibm
Security Bulletin: Vulnerability in Golang Go affect IBM Cloud Pak System [CVE-2022-41723]
2023-11-22 18:01:45
Security Bulletin: A vulnerability in Golang Go package affects Data Replication on Cloud Pak for Data
2023-11-07 21:20:47
Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to Golang Go (CVE-2022-41723)
2023-07-13 14:55:26
osv
osv
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
2023-02-16 22:31:36
CVE-2022-41723
2023-02-28 18:15:09
BIT-golang-2022-41723
2024-03-06 10:57:47
redhatcve
redhatcve
CVE-2022-41723
2023-03-14 23:43:00
CVE-2024-4436
2024-05-06 17:25:37
debiancve
debiancve
CVE-2022-41723
2023-02-28 18:15:09
prion
prion
Code injection
2023-02-28 18:15:00
alpinelinux
alpinelinux
CVE-2022-41723
2023-02-28 18:15:09
cve
cve
CVE-2022-41723
2023-02-28 18:15:09
veracode
veracode
Denial Of Service (DoS)
2023-02-18 18:10:53
Denial Of Service (DoS)
2023-02-26 12:22:40
amazon
amazon
Important: docker
2023-10-30 23:31:00
Important: rclone
2023-07-17 17:40:00
Important: nerdctl
2023-08-03 18:10:00
github
github
Uncontrolled Resource Consumption
2023-02-17 14:00:02
redhat
redhat
(RHSA-2024:0948) Moderate: OpenShift Container Platform 4.13.35 security update
2024-02-28 14:06:01
(RHSA-2023:3305) Moderate: OpenShift Container Platform 4.13.1 security and extras update
2023-05-30 11:59:40
(RHSA-2023:7058) Moderate: rhc security, bug fix, and enhancement update
2023-11-14 08:44:18
cgr
cgr
CVE-2022-41723 vulnerabilities
2024-05-07 03:06:34
gitlab
gitlab
Uncontrolled Resource Consumption
2023-02-17 00:00:00
wolfi
wolfi
CVE-2022-41723 vulnerabilities
2024-05-07 03:06:34
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.6-alt1
2023-02-22 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2023-03-24 08:55:49
freebsd
freebsd
go -- multiple vulnerabilities
2023-02-14 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0362
2023-03-23 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0564
2023-04-06 00:00:00
oraclelinux
oraclelinux
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
almalinux
almalinux
Moderate: toolbox security and bug fix update
2023-11-07 00:00:00
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON
Related for ALAS2-2023-2192
nessus69redos1ubuntucve1openvas33cbl_mariner5fedora16ibm20osv6redhatcve2debiancve1prion1alpinelinux1cve1veracode2amazon10github1redhat18cgr1gitlab1wolfi1altlinux1mageia1freebsd1photon2oraclelinux1almalinux2