Product:

Go

(Golang)
Repositories https://github.com/golang/go
#Vulnerabilities 119
Date Id Summary Products Score Patch Annotated
2023-10-11 CVE-2023-39325 A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit... Fedora, Go, Http2, Astra_trident, Astra_trident_autosupport 7.5