Medium WID-SEC-2023-0736 1 CVE

IBM Spectrum Scale: Schwachstelle ermöglicht Denial of Service

Published Mar 22, 2023 · Updated Mar 22, 2023 · de-DE

Vendor: IBM Product: Spectrum Scale < V5.1.7.0 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Spectrum Scale ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Spectrum Scale ist eine Lösung für das Management großer unstrukturierter Datenmengen.

Vulnerabilities 1

Medium 5.3

CVE-2022-41717 Public exploit

Excessive memory growth in net/http and golang.org/x/net/http2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go

Dec 8, 2022

Revision history

2023-03-22 #1
Initiale Fassung

References

IBM Security Bulletin vom 2023-03-22
https://www.ibm.com/support/pages/node/6964532