Lucene search
+L

99 matches found

NVD
NVD
added 2023/02/28 6:15 p.m.30 views

CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS7.5AI score0.04561EPSS
SaveExploits0References15
OSV
OSV
added 2023/02/28 6:15 p.m.7 views

DEBIAN-CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.7AI score0.04561EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/28 6:15 p.m.11 views

AZL-37481 CVE-2022-41723 affecting package golang for versions less than 1.21.6-1

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.7AI score0.04561EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/02/28 6:15 p.m.64 views

CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.5AI score0.04561EPSS
SaveExploits0References7
OSV
OSV
added 2023/02/28 6:15 p.m.6 views

UBUNTU-CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.7AI score0.04561EPSS
SaveExploits0References8
Prion
Prion
added 2023/02/28 6:15 p.m.35 views

Code injection

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

5CVSS7.4AI score0.04561EPSS
SaveExploits0References14Affected Software3
Vulnrichment
Vulnrichment
added 2023/02/28 5:19 p.m.11 views

CVE-2022-41723 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

6.9AI score0.04561EPSS
SaveExploits0References14
Cvelist
Cvelist
added 2023/02/28 5:19 p.m.44 views

CVE-2022-41723 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.6AI score0.04561EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2023/02/28 5:19 p.m.58 views

CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.5AI score0.04561EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2023/02/28 5:19 p.m.81 views

CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS7.8AI score0.04561EPSS
SaveExploits0
OSV
OSV
added 2023/02/28 5:19 p.m.31 views

CVE-2022-41723 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.7AI score
SaveExploits0References18
CNNVD
CNNVD
added 2023/02/28 12:0 a.m.6 views

Google Golang 安全漏洞

Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...

7.5CVSS6.9AI score0.04561EPSS
SaveExploits0References35
Veracode
Veracode
added 2023/02/26 12:22 p.m.40 views

Denial Of Service (DoS)

github.com/golang/net is vulnerable to Denial of Service DoS attacks. An attacker is able to cause excessive CPU consumption through the HPACK decoder via a small number of maliciously crafted HTTP/2 stream requests, resulting in an application crash...

7.5CVSS7.3AI score0.04561EPSS
SaveExploits0References18Affected Software2
Github Security Blog
Github Security Blog
added 2023/02/17 2:0 p.m.78 views

golang.org/x/net vulnerable to Uncontrolled Resource Consumption

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS7.4AI score0.04561EPSS
SaveExploits0References17Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2023/02/17 12:0 a.m.59 views

Uncontrolled Resource Consumption

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS2.2AI score0.04561EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/02/16 10:31 p.m.52 views

GO-2023-1571 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS7.6AI score0.04561EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/16 3:3 a.m.5 views

SUSE CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests...

7.5CVSS6.7AI score0.04561EPSS
SaveExploits0References35
SUSE CVE
SUSE CVE
added 2023/02/15 4:25 a.m.6 views

SUSE CVE-2018-14645

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service...

7.5CVSS7.3AI score0.03009EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:59 a.m.5 views

SUSE CVE-2020-11100

In hpackdhtinsert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution...

8.8CVSS7.9AI score0.60727EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2022/01/13 6:33 a.m.54 views

CVE-2018-14645

A flaw was discovered in the HPACK decoder of haproxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpackvalididx resulted in a remote crash and denial of service. Mitigation HTTP/2 support is disabled by default on OpenShift Container Platform 3.11. To mitigate this...

7.5CVSS1.2AI score0.03009EPSS
SaveExploits0References2
Rows per page
Query Builder