Open mend-bolt-for-github[bot] opened 1 year ago
[mirror] Go supplementary network libraries
Dependency Hierarchy: - :x: **github.com/golang/net/http2/hpack-v0.1.0** (Vulnerable Library)
Found in HEAD commit: 1c9178c5a1b42520307da1fa7f9b1899276178ed
Found in base branch: master
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
Publish Date: 2023-02-28
URL: CVE-2022-41723
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Type: Upgrade version
Origin: https://osv.dev/vulnerability/GO-2023-1568
Release Date: 2022-09-29
Fix Resolution: v0.7.0
Step up your Open Source Security Game with Mend here
CVE-2022-41723 - High Severity Vulnerability
[mirror] Go supplementary network libraries
Dependency Hierarchy: - :x: **github.com/golang/net/http2/hpack-v0.1.0** (Vulnerable Library)
Found in HEAD commit: 1c9178c5a1b42520307da1fa7f9b1899276178ed
Found in base branch: master
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
Publish Date: 2023-02-28
URL: CVE-2022-41723
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://osv.dev/vulnerability/GO-2023-1568
Release Date: 2022-09-29
Fix Resolution: v0.7.0
Step up your Open Source Security Game with Mend here