Skip to content

Commit

Permalink
data/reports: add missing alias to GO-2022-1144.yaml
Browse files Browse the repository at this point in the history
Aliases: CVE-2022-41717, GHSA-xrjj-mj9h-534m

Updates #1144
Fixes #1501

Change-Id: Ib2313bdf9ae45f2f138fcc637392606a60be5759
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464317
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
Auto-Submit: Julie Qiu <julieqiu@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Julie Qiu <julieqiu@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
  • Loading branch information
julieqiu authored and gopherbot committed Jan 31, 2023
1 parent 395ce96 commit c9eaa27
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 3 deletions.
7 changes: 4 additions & 3 deletions data/osv/GO-2022-1144.json
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
{
"schema_version": "1.3.1",
"id": "GO-2022-1144",
"published": "0001-01-01T00:00:00Z",
"modified": "0001-01-01T00:00:00Z",
"aliases": [
"CVE-2022-41717"
"CVE-2022-41717",
"GHSA-xrjj-mj9h-534m"
],
"details": "An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.\n\nHTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.",
"affected": [
Expand Down Expand Up @@ -111,5 +111,6 @@
{
"name": "Josselin Costanzi"
}
]
],
"schema_version": "1.3.1"
}
2 changes: 2 additions & 0 deletions data/reports/GO-2022-1144.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,8 @@ description: |
client. While the total number of entries in this cache is capped, an
attacker sending very large keys can cause the server to allocate
approximately 64 MiB per open connection.
ghsas:
- GHSA-xrjj-mj9h-534m
credit: Josselin Costanzi
references:
- report: https://go.dev/issue/56350
Expand Down

0 comments on commit c9eaa27

Please sign in to comment.