Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-856A3D83B80945B8096BF22AD35F38A1HistorySep 07, 2022 - 12:00 a.m.
golang.org/x/net/http2 Denial of Service vulnerability
2022-09-0700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
12
0.002 Low
EPSS
Percentile
62.2%
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go/golang.org/x/net/http2 | lt | 0.0.0-20220906165146-f3363e06e74c |
References
github.com/advisories/GHSA-69cg-p879-7622
groups.google.com/g/golang-announce
groups.google.com/g/golang-announce/c/x49AQzIVX-s
lists.fedoraproject.org/archives/list/[email protected]/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/
lists.fedoraproject.org/archives/list/[email protected]/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/
nvd.nist.gov/vuln/detail/CVE-2022-27664
pkg.go.dev/vuln/GO-2022-0969
security.gentoo.org/glsa/202209-26
security.netapp.com/advisory/ntap-20220923-0004/
Related
redhat
redhat
nessus
nessus
Oracle Linux 9 : grafana-pcp (ELSA-2023-2177)
2023-05-15 00:00:00
EulerOS 2.0 SP10 : golang (EulerOS-SA-2022-2822)
2022-12-21 00:00:00
RHEL 8 : grafana-pcp (RHSA-2023:2785)
2023-05-16 00:00:00
oraclelinux
oraclelinux
grafana-pcp security update
2023-05-24 00:00:00
grafana-pcp security and enhancement update
2023-05-15 00:00:00
grafana security update
2023-05-24 00:00:00
ibm
ibm
github
github
golang.org/x/net/http2 Denial of Service vulnerability
2022-09-07 00:01:51
nvd
nvd
CVE-2022-27664
2022-09-06 18:15:12
cvelist
cvelist
CVE-2022-27664
2022-09-06 17:29:08
cbl_mariner
cbl_mariner
CVE-2022-27664 affecting package golang 1.17.13-2
2024-06-29 03:09:33
CVE-2022-27664 affecting package kured for versions less than 1.13.2-1
2023-11-15 20:12:47
CVE-2022-27664 affecting package golang for versions less than 1.18.8-1
2024-02-25 03:00:06
osv
osv
golang.org/x/net/http2 Denial of Service vulnerability
2022-09-07 00:01:51
Denial of service in net/http and golang.org/x/net/http2
2022-09-12 20:23:06
BIT-golang-2022-27664
2024-03-06 11:01:48
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3325-1)
2022-09-22 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2847)
2022-12-22 00:00:00
openSUSE: Security Advisory for go1.18 (SUSE-SU-2022:3325-1)
2022-09-22 00:00:00
alpinelinux
alpinelinux
CVE-2022-27664
2022-09-06 18:15:12
amazon
amazon
Medium: golang
2022-09-30 07:04:00
Important: amazon-ssm-agent
2023-08-30 18:41:00
Important: amazon-ssm-agent
2023-08-31 22:30:00
debiancve
debiancve
CVE-2022-27664
2022-09-06 18:15:12
redhatcve
redhatcve
CVE-2022-27664
2022-09-08 00:18:20
almalinux
almalinux
Moderate: grafana-pcp security update
2023-05-16 00:00:00
Moderate: grafana-pcp security and enhancement update
2023-05-09 00:00:00
Moderate: butane security, bug fix, and enhancement update
2023-05-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-09-07 08:33:55
cve
cve
CVE-2022-27664
2022-09-06 18:15:12
wolfi
wolfi
CVE-2022-27664 vulnerabilities
2024-06-29 03:08:33
gitlab
gitlab
golang.org/x/net/http2 Denial of Service vulnerability
2022-09-07 00:00:00
prion
prion
Code injection
2022-09-06 18:15:00
cgr
cgr
CVE-2022-27664 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2022-27664
2022-09-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.6-alt1
2022-09-14 00:00:00
suse
suse
Security update for go1.18 (important)
2022-09-21 00:00:00
Security update for go1.19 (important)
2022-09-21 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: golang-1.18.6-1.fc36
2022-09-13 01:30:19
[SECURITY] Fedora 37 Update: golang-1.19.1-1.fc37
2022-09-16 00:17:41
freebsd
freebsd
go -- multiple vulnerabilities
2022-09-06 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0519
2022-09-20 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0455
2022-09-20 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2022-09-29 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2022-10-05 08:23:49
rocky
rocky
git-lfs security and bug fix update
2022-10-25 07:32:51