Lucene search
RedHatRHSA-2024:1963HistoryApr 23, 2024 - 12:09 a.m.
(RHSA-2024:1963) Important: golang security update
2024-04-2300:09:01
access.redhat.com
17
golang
security update
dos vulnerability
net/http
x/net/http2
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.3
Confidence
High
EPSS
0
Percentile
13.2%
The golang packages provide the Go programming language compiler.
Security Fix(es):
- golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | ppc64le | golang | < 1.20.12-4.el9_3 | golang-1.20.12-4.el9_3.ppc64le.rpm |
| RedHat | 9 | aarch64 | go-toolset | < 1.20.12-4.el9_3 | go-toolset-1.20.12-4.el9_3.aarch64.rpm |
| RedHat | 9 | x86_64 | golang | < 1.20.12-4.el9_3 | golang-1.20.12-4.el9_3.x86_64.rpm |
| RedHat | 9 | s390x | go-toolset | < 1.20.12-4.el9_3 | go-toolset-1.20.12-4.el9_3.s390x.rpm |
| RedHat | 9 | s390x | golang-bin | < 1.20.12-4.el9_3 | golang-bin-1.20.12-4.el9_3.s390x.rpm |
| RedHat | 9 | x86_64 | golang-bin | < 1.20.12-4.el9_3 | golang-bin-1.20.12-4.el9_3.x86_64.rpm |
| RedHat | 9 | noarch | golang-docs | < 1.20.12-4.el9_3 | golang-docs-1.20.12-4.el9_3.noarch.rpm |
| RedHat | 9 | noarch | golang-misc | < 1.20.12-4.el9_3 | golang-misc-1.20.12-4.el9_3.noarch.rpm |
| RedHat | 9 | ppc64le | golang-bin | < 1.20.12-4.el9_3 | golang-bin-1.20.12-4.el9_3.ppc64le.rpm |
| RedHat | 9 | x86_64 | go-toolset | < 1.20.12-4.el9_3 | go-toolset-1.20.12-4.el9_3.x86_64.rpm |
Related
osv
osv
CGA-9qj7-8jwm-mvhx
2024-06-06 12:25:29
CGA-9pw3-39m7-rg3r
2024-06-06 12:25:28
CGA-9h4x-98rf-mqjr
2024-06-06 12:25:26
cbl_mariner
cbl_mariner
CVE-2023-45288 affecting package telegraf for versions less than 1.31.0-1
2024-07-02 23:30:04
CVE-2023-45288 affecting package blobfuse2 for versions less than 2.1.2-3
2024-05-16 10:10:40
debiancve
debiancve
CVE-2023-45288
2024-04-04 21:15:16
vulnrichment
vulnrichment
CVE-2023-45288 HTTP/2 CONTINUATION flood in net/http
2024-04-04 20:37:30
oraclelinux
oraclelinux
git-lfs security update
2024-05-08 00:00:00
go-toolset:ol8 security update
2024-04-23 00:00:00
redhat
redhat
(RHSA-2024:3315) Important: OpenShift Virtualization 4.13.9 Images security update
2024-05-23 06:30:00
(RHSA-2024:4546) Important: git-lfs security update
2024-07-15 15:44:44
(RHSA-2024:4934) Important: git-lfs security update
2024-07-31 09:56:59
github
github
Traefik affected by HTTP/2 CONTINUATION flood in net/http
2024-04-15 18:14:51
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1122-1)
2024-05-07 00:00:00
openSUSE: Security Advisory for go1.21 (SUSE-SU-2024:1122-1)
2024-04-09 00:00:00
ibm
ibm
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.22 (SUSE-SU-2024:1121-1)
2024-04-08 00:00:00
Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2024-036)
2024-05-31 00:00:00
AlmaLinux 8 : git-lfs (ALSA-2024:2699)
2024-05-09 00:00:00
cgr
cgr
CVE-2023-45288 vulnerabilities
2024-05-19 03:07:16
githubexploit
githubexploit
Exploit for CVE-2023-45288
2024-04-06 06:33:45
wolfi
wolfi
CVE-2023-45288 vulnerabilities
2024-10-14 09:12:37
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.3
Confidence
High
EPSS
0
Percentile
13.2%
Related for RHSA-2024:1963