tocsin

Alpine/go: high 7.5

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

Action: Upgrade go to 1.19.6-r0 or later.

Affected

introducedfixedlast affected
01.19.6-r0-

Fixed versions

1.19.6-r0

Sources

published · modified · JSON