Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-882CED2B75A661F555915D274D874D42HistoryFeb 17, 2023 - 12:00 a.m.
Uncontrolled Resource Consumption
2023-02-1700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
15
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go/golang.org/x/net | lt | 0.7.0 |
Related
nessus
nessus
Fedora 37 : gh / golang-github-cenkalti-backoff / golang-github-cli-crypto / etc (2023-cb20f08a4e)
2023-04-20 00:00:00
Fedora 38 : skopeo (2023-ccaf5538dd)
2023-04-15 00:00:00
Fedora 37 : doctl / golang-github-digitalocean-godo (2023-3737bc1c0a)
2023-04-24 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: skopeo-1.11.2-1.fc37
2023-04-12 01:34:16
[SECURITY] Fedora 37 Update: golang-github-cli-gh-1.2.1-2.fc37
2023-04-20 02:54:37
redhat
redhat
openvas
openvas
amazon
amazon
Important: cni-plugins
2023-08-03 18:10:00
Important: docker
2023-10-30 23:31:00
Important: rclone
2023-07-17 17:40:00
ibm
ibm
Security Bulletin: CVE-2022-41723 may affect IBM CICS TX Advanced
2023-03-29 19:12:14
Security Bulletin: CVE-2022-41723 may affect IBM CICS TX Standard
2023-03-29 19:07:06
cgr
cgr
CVE-2022-41723 vulnerabilities
2024-05-07 21:06:45
veracode
veracode
Denial Of Service (DoS)
2023-02-18 18:10:53
Denial Of Service (DoS)
2023-02-26 12:22:40
github
github
Uncontrolled Resource Consumption
2023-02-17 14:00:02
cbl_mariner
cbl_mariner
CVE-2022-41723 affecting package kubevirt for versions less than 0.59.0-15
2024-03-21 08:09:05
CVE-2022-41723 affecting package skopeo for versions less than 1.12.0-3
2023-08-30 15:15:49
CVE-2022-41723 affecting package telegraf for versions less than 1.26.0-2
2023-04-16 01:05:11
osv
osv
BIT-golang-2022-41723
2024-03-06 10:57:47
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
2023-02-16 22:31:36
CVE-2022-41723
2023-02-28 18:15:09
redos
redos
ROS-20231030-04
2023-10-30 00:00:00
ubuntucve
ubuntucve
CVE-2022-41723
2023-02-28 00:00:00
redhatcve
redhatcve
CVE-2022-41723
2023-03-14 23:43:00
CVE-2024-4436
2024-05-06 17:25:37
debiancve
debiancve
CVE-2022-41723
2023-02-28 18:15:09
prion
prion
Code injection
2023-02-28 18:15:00
alpinelinux
alpinelinux
CVE-2022-41723
2023-02-28 18:15:09
cve
cve
CVE-2022-41723
2023-02-28 18:15:09
wolfi
wolfi
CVE-2022-41723 vulnerabilities
2024-05-07 21:06:45
freebsd
freebsd
go -- multiple vulnerabilities
2023-02-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.6-alt1
2023-02-22 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2023-03-24 08:55:49
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0362
2023-03-23 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0564
2023-04-06 00:00:00
oraclelinux
oraclelinux
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
almalinux
almalinux
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00
Moderate: toolbox security and bug fix update
2023-11-07 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Related for GITLAB-882CED2B75A661F555915D274D874D42