Security scan of the zookeeper operator reveals vulnerability regarding CVE-2022-27664 in Zookeeper Operator Image.
CVE Link: https://avd.aquasec.com/nvd/cve-2022-27664
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
Importance
must-have
Location
/usr/local/bin/zookeeper-operator golang.org/x/net http version v0.0.0-20211209124913-491a49abca63
Suggestions for an improvement
Update golang net/http package to 0.0.0-20220906165146-f3363e06e74c or later
Description
Security scan of the zookeeper operator reveals vulnerability regarding CVE-2022-27664 in Zookeeper Operator Image. CVE Link: https://avd.aquasec.com/nvd/cve-2022-27664
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
Importance
must-have
Location
/usr/local/bin/zookeeper-operator golang.org/x/net http version v0.0.0-20211209124913-491a49abca63
Suggestions for an improvement
Update golang net/http package to 0.0.0-20220906165146-f3363e06e74c or later