CVE-2022-41723

Name
CVE-2022-41723
Description
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
NVD Severity
unknown
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://go.dev/cl/468135
MISC https://go.dev/issue/57855
MISC https://go.dev/cl/468295
MISC https://pkg.go.dev/vuln/GO-2023-1571
MISC https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E

Match rules

CPE URI Source package Min version Max version

Vulnerable and fixed packages

Source package Branch Version Maintainer Status