CVE-2026-33814

Опубликовано: 10 мая 2026

Источник: msrc

CVSS3: 7.5

EPSS Низкий

Описание

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

EPSS

Процентиль: 54%

0.00781

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-33814

CVSS3: 7.5

ubuntu

4 месяца назад

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

CVE-2026-33814

CVSS3: 7.5

redhat

4 месяца назад

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

CVE-2026-33814

CVSS3: 7.5

nvd

4 месяца назад

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

CVE-2026-33814

CVSS3: 7.5

debian

4 месяца назад

When processing HTTP/2 SETTINGS frames, transport will enter an infini ...

openSUSE-SU-2026:21108-1

suse-cvrf

3 месяца назад

Security update for ignition

EPSS

Процентиль: 54%

0.00781

Низкий

7.5 High

CVSS3