EUVD-2022-0700

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Uncontrolled memory consumption in Go net/http header cache via HTTP/2 requests affects versions.

Reporter	Title	Published	Views	Family All 337
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion HCI may be vulnerable to Denial of Service via use of openshift/machine-api-operator, openshift/machine-config-operator (CVE-2020-28851, CVE-2020-28852, CVE-2021-44716)	21 Dec 202317:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Netezza as a Service is vulnerable to denial of service due to Golang net package (CVE-2021-33194, CVE-2021-44716, CVE-2021-31525)	28 Jun 202211:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go and Kubernetes.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from expat, Golang Go, gcc, openssl and libxml.	16 May 202206:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	21 Mar 202323:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion may be vulnerable to Denial of Service via use of openshift/machine-api-operator, openshift/machine-config-operator (CVE-2020-28851, CVE-2020-28852, CVE-2021-44716)	16 Nov 202321:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2022	20 Jun 202213:10	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "630af27d-9a6e-3585-b692-3b68b213c772",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "69491051-10a4-3580-93bd-d019129b1296",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-44716
go	www.go.dev/cl/369794
go	www.go.dev/issue/50058
groups	www.groups.google.com/g/golang-announce/c/hcmEScgc00k
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00016.html
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00017.html
pkg	www.pkg.go.dev/vuln/GO-2022-0288
security	www.security.gentoo.org/glsa/202208-02
security	www.security.netapp.com/advisory/ntap-20220121-0002
suse	www.suse.com/security/cve/CVE-2021-44716.html

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.5

CVSS 25

EPSS0.00088