ROS-20240826-01

Vulnerability of HTTP/2 protocol implementation is related to the possibility of forming a stream of requests within an already established network connection without opening new network connections and without confirming receipt of requests.
The vulnerability of the HTTP/2 protocol implementation is related to the possibility of generating a stream of requests within an already established network connection, without opening new network connections and without acknowledging the receipt of packets.
packets. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of
denial of service

Vulnerability in the http2 package of the Go programming language is related to uncontrolled consumption of server resources as a result of resetting Server.MaxConc
as a result of resetting the Server.MaxConcurrentStreams parameter when processing a request stream. Exploitation
exploitation of the vulnerability could allow a remote attacker to cause a denial of service.

A vulnerability in the filepath package of the Go programming language is related to an incorrect path name restriction to a restricted directory.
to a restricted directory. Exploitation of the vulnerability could allow an attacker acting remotely
remotely to disclose protected information