Lucene search
GoCVELIST:CVE-2022-41721HistoryJan 13, 2023 - 10:46 p.m.
CVE-2022-41721 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c
2023-01-1322:46:22
Go
raw.githubusercontent.com
2
A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be attacker-manipulated to represent arbitrary HTTP2 requests.
Related
freebsd
freebsd
traefik -- Use of vulnerable Go module x/net/http2
2022-10-22 00:00:00
osv
osv
golang.org/x/net/http2/h2c vulnerable to request smuggling attack
2023-01-14 00:30:23
gitlab
gitlab
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
2023-01-14 00:00:00
golang.org/x/net/http2/h2c vulnerable to request smuggling attack
2023-01-14 00:00:00
nessus
nessus
FreeBSD : traefik -- Use of vulnerable Go module x/net/http2 (428922c9-b07e-11ed-8700-5404a68ad561)
2023-02-19 00:00:00
Fedora 38 : caddy (2023-74e5545901)
2023-08-27 00:00:00
RHEL 9 : x_net_http2_h2c (Unpatched Vulnerability)
2024-05-11 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to HTTP request smuggling in Golang Go ( CVE-2022-41721)
2023-06-28 20:36:45
Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to request smuggling in Go (CVE-2022-41721)
2023-03-03 15:22:00
Security Bulletin: CVE-2022-41721 may affect IBM CICS TX Standard
2023-04-04 13:29:55
openvas
openvas
Fedora: Security Advisory for caddy (FEDORA-2023-4926525509)
2023-08-27 00:00:00
Fedora: Security Advisory for caddy (FEDORA-2023-74e5545901)
2023-08-27 00:00:00
redhatcve
redhatcve
CVE-2022-41721
2023-01-19 04:04:56
ubuntucve
ubuntucve
CVE-2022-41721
2023-01-13 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: caddy-2.6.4-1.fc37
2023-08-27 00:51:01
[SECURITY] Fedora 38 Update: caddy-2.6.4-1.fc38
2023-08-27 00:44:06
cve
cve
CVE-2022-41721
2023-01-13 23:15:09
prion
prion
Design/Logic Flaw
2023-01-13 23:15:00
veracode
veracode
HTTP Request Smuggling
2023-01-22 08:35:58
cgr
cgr
CVE-2022-41721 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2022-41721
2023-01-13 23:15:09
github
github
golang.org/x/net/http2/h2c vulnerable to request smuggling attack
2023-01-14 00:30:23
cbl_mariner
cbl_mariner
CVE-2022-41721 affecting package opa for versions less than 0.50.2-5
2023-08-30 15:15:49
redhat
redhat