tocsin

Alpine/go: high 7.5

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue

Action: Upgrade go to 1.12.8-r0 or later.

Affected

introducedfixedlast affected
01.12.8-r0-

Fixed versions

1.12.8-r0

Sources

published · modified · JSON