golang.org/x/net/http2 Denial of Service vulnerability
Overview
Source
ID
GHSA-69cg-p879-7622
Aliases
BIT-golang-2022-27664
CVE-2022-27664
GO-2022-0969
Affected package
Description
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
Impact
Severity
help_outline
Latest version of the CVSS score reported by the source of the advisory.
7.5 HIGH
Reference links
Summary
105.33k
Total packages affected
help_outline
Packages with at least one version that is affected by the advisory or has an affected dependency.
12.99k
Packages with a known fix
help_outline
Packages with versions affected by the advisory that have a greater version that is not affected.
8.00%
Total ecosystem affected
help_outline
The proportion of packages in the ecosystem that are affected by the advisory (fixed or not).
Affected Version: Introduced: 0, Fixed: 0.0.0-20220906165146-f3363e06e74c
Patched/Unaffected
Affected
Affected Version: Introduced: 0, Fixed: 0.0.0-20220906165146-f3363e06e74c