2 matches found
Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers bsc1279042. CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response...
8.7CVSS6.7AI score0.00641EPSS
SaveExploits0References8
CVE-2026-84445
CVE-2026-84445 affects gRPC-Go prior to versions 1.82.2 and 1.83.2 . Servers created via xds.NewGRPCServer() accept RPCs containing neither the :authority nor Host header. The RouteAndProcess function in internal/xds/server/routing.go then assumes an authority value exists and indexes an empty sl...
8.7CVSS5.8AI score0.00641EPSS
SaveExploits0References10
20