EUVD-2022-44897

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Denial of service risk from excessive resource use in net/http and mime/multipart fixed in ReadForm.

Reporter	Title	Published	Views	Family All 356
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	2 Jan 202411:59	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Go	3 Apr 202313:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pypa Setuptools, Golang Go, OpenSSH, Minio and Certifi may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in golang affect IBM Db2® REST	1 May 202314:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to several issues due to go modules used in nginx ( CVE-2023-24532, CVE-2022-41724, CVE-2022-41725, CVE-2022-41723 )	8 Aug 202415:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator may be vulnerable to denial of service due to [CVE-2022-41725]	28 Apr 202311:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by Multiple Security Vulnerabilities	17 Oct 202408:51	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "1fa31593-75dc-302c-9dfb-733801bbf600",
        "vendor": {
          "name": "Go standard library"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5131c1e3-b8dd-33e5-852d-7d75c87e4a11",
        "product": {
          "name": "mime/multipart"
        },
        "product_version": "1.20.0-0 <1.20.1"
      },
      {
        "id": "f537a61c-5a2b-3e6f-8d57-1e09b79896bc",
        "product": {
          "name": "mime/multipart"
        },
        "product_version": "0 <1.19.6"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2022-41725.html
go	www.go.dev/issue/58006
go	www.go.dev/cl/468124
groups	www.groups.google.com/g/golang-announce/c/V0aBFqaFs_E
pkg	www.pkg.go.dev/vuln/GO-2023-1569
security	www.security.gentoo.org/glsa/202311-09

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00065

SSVC