Debian: CVE-2022-41723: golang-1.19, golang-golang-x-net -- security update

Debian: CVE-2022-41723: golang-1.19, golang-golang-x-net -- security update

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

02/28/2023

Created

07/31/2024

Added

07/30/2024

Modified

01/28/2025

Description

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

Solution(s)

• debian-upgrade-golang-1-19
• debian-upgrade-golang-golang-x-net

References

• https://attackerkb.com/topics/cve-2022-41723
• CVE - 2022-41723