VYPR
High severityNVD Advisory· Published Sep 6, 2022· Updated Aug 3, 2024

CVE-2022-27664

CVE-2022-27664

Description

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
golang.org/x/netGo
< 0.0.0-20220906165146-f3363e06e74c0.0.0-20220906165146-f3363e06e74c
golang.org/x/net/http2Go
< 0.0.0-20220906165146-f3363e06e74c0.0.0-20220906165146-f3363e06e74c

Affected products

253

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.