Skip to content
OpenAdvisories

Archive

8 December 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-41717 Public exploit

    Excessive memory growth in net/http and golang.org/x/net/http2

    An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

  • Medium 6.5
    CVE-2022-38599 Public exploit

    Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /use…