CVE-2021-44716

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests

published January 1, 2022

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03958 · 90.4th percentile
Published
2022-01-01T00:00Z
EPSS history
Timeline
  • 01 JAN 00:00Z
    net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests
    cvelistv5