CVE-2021-44716
CVE-2021-44716
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS 7.5 · Élevée · EPSS 4,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
golang-golang-x-net Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 1:0.0+git20211209.491a49a+dfsg-1
Mettez à jour vers 1:0.0+git20211209.491a49a+dfsg-1
golang-golang-x-net Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 1:0.0+git20211209.491a49a+dfsg-1
Mettez à jour vers 1:0.0+git20211209.491a49a+dfsg-1
golang-golang-x-net Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 1:0.0+git20211209.491a49a+dfsg-1
Mettez à jour vers 1:0.0+git20211209.491a49a+dfsg-1
golang-golang-x-net-dev Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 0.0+git20150226.3d87fd6-3
- 0.0+git20151007.b846920+dfsg-1
- 1:0.0+git20150817.66f0418-1
- 1:0.0+git20160110.4fd4a9f-1
- 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm1
- 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
google-guest-agent Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 20201217.02-0ubuntu1~16.04.0
- 20230426.00-0ubuntu2~16.04.3
- 20231004.02-0ubuntu1~16.04.1
- 20231004.02-0ubuntu1~16.04.2
- 20240716.00-0ubuntu1~16.04.0
- 20240716.00-0ubuntu1~16.04.0+esm1
- 20240716.00-0ubuntu1~16.04.0+esm2
- 20240716.00-0ubuntu1~16.04.0+esm3
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
golang-1.8 Ubuntu:18.04:LTS
- Versions du logiciel
- 1.8.3-2ubuntu1
- 1.8.3-2ubuntu1.18.04.1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
golang-golang-x-net-dev Ubuntu:Pro:18.04:LTS
- Versions du logiciel
- 1:0.0+git20170629.c81e7f2+dfsg-1ubuntu1
- 1:0.0+git20170629.c81e7f2+dfsg-1ubuntu2
- 1:0.0+git20170629.c81e7f2+dfsg-2
- 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm1
- 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2
- 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
google-guest-agent Ubuntu:Pro:18.04:LTS
- Versions du logiciel
- 20201217.02-0ubuntu1~18.04.0
- 20210414.00-0ubuntu1~18.04.0
- 20210629.00-0ubuntu1~18.04.1
- 20220622.00-0ubuntu2~18.04.0
- 20220622.00-0ubuntu2~18.04.1
- 20230426.00-0ubuntu2~18.04.0
- 20231004.02-0ubuntu1~18.04.2
- 20231004.02-0ubuntu1~18.04.3
- 20240716.00-0ubuntu1~18.04.0
- 20241011.01-0ubuntu1~18.04.0
- 20241011.01-0ubuntu1~18.04.0+esm1
- 20241011.01-0ubuntu1~18.04.0+esm2
- 20241011.01-0ubuntu1~18.04.0+esm3
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
google-guest-agent Ubuntu:20.04:LTS
- Versions du logiciel
- 20201217.02-0ubuntu1~20.04.0
- 20210414.00-0ubuntu1~20.04.0
- 20210629.00-0ubuntu1~20.04.0
- 20220622.00-0ubuntu2~20.04.0
- 20220622.00-0ubuntu2~20.04.2
- 20230426.00-0ubuntu2~20.04.0
- 20231004.02-0ubuntu1~20.04.1
- 20231004.02-0ubuntu1~20.04.2
- Plages de versions concernées
- ECOSYSTEM: < 20231004.02-0ubuntu1~20.04.3
Mettez à jour vers 20231004.02-0ubuntu1~20.04.3
golang-golang-x-net-dev Ubuntu:Pro:20.04:LTS
- Versions du logiciel
- 1:0.0+git20190811.74dc4d7+dfsg-1
- 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1
- 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
- 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
golang-1.17 Ubuntu:22.04:LTS
- Versions du logiciel
- 1.17-1ubuntu2
- 1.17.3-1ubuntu1
- 1.17.3-1ubuntu2
- 1.17.13-3ubuntu1
- 1.17.13-3ubuntu1.2
- 1.17.13-3ubuntu1.3
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
google-guest-agent Ubuntu:22.04:LTS
- Versions du logiciel
- 20210629.00-0ubuntu1
- 20210629.00-0ubuntu2
- 20220104.00-0ubuntu1
- 20220104.00-0ubuntu2
- 20220622.00-0ubuntu2~22.04.0
- 20220622.00-0ubuntu2~22.04.1
- 20230426.00-0ubuntu2~22.04.0
- 20231004.02-0ubuntu1~22.04.1
- 20231004.02-0ubuntu1~22.04.2
- Plages de versions concernées
- ECOSYSTEM: < 20231004.02-0ubuntu1~22.04.3
Mettez à jour vers 20231004.02-0ubuntu1~22.04.3
Sources originales
- https://groups.google.com/g/golang-announce/c/hcmEScgc00k
- https://security.netapp.com/advisory/ntap-20220121-0002/
- https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/01/msg00017.html
- https://security.gentoo.org/glsa/202208-02
- https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf
- https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-44716