Gentoo Linux: CVE-2022-41723: Go: Multiple Vulnerabilities

Gentoo Linux: CVE-2022-41723: Go: Multiple Vulnerabilities

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

02/28/2023

Created

11/28/2023

Added

11/27/2023

Modified

01/28/2025

Description

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

Solution(s)

• gentoo-linux-upgrade-dev-lang-go

References

• https://attackerkb.com/topics/cve-2022-41723
• CVE - 2022-41723
• 202311-09