2 matches found
SUSE CVE-2022-41717
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate...
7.5CVSS7.4AI score0.05623EPSS
SaveExploits0References8
BSA-2018-536
Security Advisory ID : BSA-2018-536 Component : OpenSSH Revision : 2.0: Final A memory exhaustion issue in OpenSSH that can be triggered before user authentication was found. An unauthenticated attacker could consume approx. 400 MB of memory per each connection. The attacker could set up multiple...
7.8CVSS7.2AI score0.29462EPSS
SaveExploits0
20