VDB
BDU%3A2024-02376
BDU%3A2024-02376
PUBLISHED
CVSS 5 MEDIUM
Уязвимость пакета http2 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, Canonical Ltd., ООО «Ред Софт», Fedora Project, The Go Project | Red Hat Enterprise Linux, OpenSUSE Leap, Debian GNU/Linux, Red Hat Ceph Storage, Red Hat Software Collections, openSUSE Tumbleweed, Red Hat Storage, Ubuntu, Red Hat Quay, Openshift Service Mesh, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, Red Hat Openshift Data Foundation, SUSE Linux Enterprise Module for Development Tools, Red Hat OpenShift GitOps, Red Hat OpenShift Container Platform, Red Hat Satellite, SUSE Manager Retail Branch Server, Red Hat OpenStack Platform, SUSE Enterprise Storage, Red Hat Web Terminal, Node Maintenance Operator, Application Interconnect, Fedora, SUSE Linux Enterprise Real Time, Red Hat OpenShift on AWS, Migration Toolkit for Virtualization, Red Hat OpenShift Virtualization, OpenShift Serverless, Red Hat Ansible Automation Platform, Go, Red Hat Developer Tools, OpenShift Developer Tools and Services for OCP, Red Hat Advanced Cluster Security, Red Hat OpenShift Dev Spaces, Self Node Remediation, Logging subsystem for Red Hat OpenShift, SUSE Liberty Linux, OpenShift API for Data Protection, OpenShift Secondary Scheduler Operator, Red Hat Advanced Cluster Management for Kubernetes, Migration Toolkit for Containers, Red Hat OpenShift distributed tracing, http2, Satellite Client |
Timeline
- Mar 29, 2024 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://go-review.googlesource.com/c/net/+/455635 url
- https://go-review.googlesource.com/c/go/+/455717 url
- https://github.com/golang/go/issues/56350 url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR/ url
- https://security-tracker.debian.org/tracker/CVE-2022-41717 url
- https://access.redhat.com/security/cve/CVE-2022-41717 url
- https://www.suse.com/security/cve/CVE-2022-41717.html url
- https://ubuntu.com/security/notices/USN-6038-2 url
- https://ubuntu.com/security/notices/USN-6038-1 url
- https://redos.red-soft.ru/support/secure/ url