From c9eaa27075b965cd486187febc7997b34d320d30 Mon Sep 17 00:00:00 2001 From: Julie Qiu Date: Tue, 31 Jan 2023 15:46:25 -0500 Subject: [PATCH] data/reports: add missing alias to GO-2022-1144.yaml Aliases: CVE-2022-41717, GHSA-xrjj-mj9h-534m Updates golang/vulndb#1144 Fixes golang/vulndb#1501 Change-Id: Ib2313bdf9ae45f2f138fcc637392606a60be5759 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464317 Reviewed-by: Tatiana Bradley Run-TryBot: Tatiana Bradley Auto-Submit: Julie Qiu TryBot-Result: Gopher Robot Run-TryBot: Julie Qiu Reviewed-by: Julie Qiu --- data/osv/GO-2022-1144.json | 7 ++++--- data/reports/GO-2022-1144.yaml | 2 ++ 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/data/osv/GO-2022-1144.json b/data/osv/GO-2022-1144.json index 34f5faff..9ad4c699 100644 --- a/data/osv/GO-2022-1144.json +++ b/data/osv/GO-2022-1144.json @@ -1,10 +1,10 @@ { - "schema_version": "1.3.1", "id": "GO-2022-1144", "published": "0001-01-01T00:00:00Z", "modified": "0001-01-01T00:00:00Z", "aliases": [ - "CVE-2022-41717" + "CVE-2022-41717", + "GHSA-xrjj-mj9h-534m" ], "details": "An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.\n\nHTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.", "affected": [ @@ -111,5 +111,6 @@ { "name": "Josselin Costanzi" } - ] + ], + "schema_version": "1.3.1" } \ No newline at end of file diff --git a/data/reports/GO-2022-1144.yaml b/data/reports/GO-2022-1144.yaml index 63eed0cf..29066264 100644 --- a/data/reports/GO-2022-1144.yaml +++ b/data/reports/GO-2022-1144.yaml @@ -37,6 +37,8 @@ description: | client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection. +ghsas: + - GHSA-xrjj-mj9h-534m credit: Josselin Costanzi references: - report: https://go.dev/issue/56350