Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-41723

Опубликовано: 28 фев. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

РелизСтатусПримечание
devel

not-affected

esm-infra/focal

released

0.9.2~20.04.2ubuntu0.1+esm1
jammy

not-affected

noble

not-affected

questing

not-affected

resolute

not-affected

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

not-affected

esm-apps-legacy/xenial

not-affected

esm-apps/bionic

not-affected

esm-apps/noble

not-affected

esm-apps/resolute

not-affected

esm-apps/xenial

not-affected

esm-infra/focal

not-affected

focal

not-affected

jammy

not-affected

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

needed

esm-infra-legacy/xenial

needed

esm-infra/bionic

needed

esm-infra/focal

DNE

esm-infra/xenial

ignored

end of ESM support, was needed
focal

DNE

jammy

DNE

lunar

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

needed

esm-apps/bionic

needed

esm-apps/jammy

needed

esm-apps/xenial

ignored

end of ESM support, was needed
esm-infra/focal

needed

focal

ignored

end of standard support, was needed
jammy

needed

lunar

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

needed

focal

ignored

end of standard support, was needed
jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needed

esm-apps/focal

needed

focal

ignored

end of standard support, was needed
jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

released

1.17.13-3ubuntu1.3
lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

released

1.18.1-1ubuntu1~16.04.6+esm1
esm-apps/bionic

released

1.18.1-1ubuntu1~18.04.4+esm1
esm-apps/focal

released

1.18.1-1ubuntu1~20.04.3
esm-apps/xenial

released

1.18.1-1ubuntu1~16.04.6+esm1
focal

released

1.18.1-1ubuntu1~20.04.3
jammy

released

1.18.1-1ubuntu1.2
lunar

DNE

mantic

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

not-affected

1.19.8-1
mantic

DNE

noble

DNE

oracular

DNE

plucky

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

not-affected

1.20.1-1
esm-apps/jammy

not-affected

1.20.1-1
focal

not-affected

1.20.1-1
jammy

not-affected

1.20.1-1
lunar

not-affected

1.20.1-1
mantic

not-affected

1.20.1-1
noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

not-affected

1.20.1-1
esm-apps/jammy

not-affected

1.20.1-1
esm-apps/noble

not-affected

1.20.1-1
focal

not-affected

1.20.1-1
jammy

not-affected

1.20.1-1
lunar

not-affected

1.20.1-1
mantic

not-affected

1.20.1-1
noble

not-affected

1.20.1-1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/xenial

needed

esm-infra/focal

DNE

esm-infra/xenial

ignored

end of ESM support, was needed
focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needed

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needed

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

oracular

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

1:0.7.0+dfsg-1
esm-apps/jammy

released

1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
esm-apps/noble

not-affected

1:0.7.0+dfsg-1
esm-apps/resolute

not-affected

1:0.7.0+dfsg-1
esm-infra/focal

DNE

focal

DNE

jammy

needed

kinetic

ignored

end of life, was needs-triage
lunar

not-affected

1:0.7.0+dfsg-1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

released

1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2
esm-apps/focal

released

1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
esm-infra-legacy/xenial

released

1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
esm-infra/xenial

released

1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

released

20230426.00-0ubuntu2
esm-apps-legacy/xenial

released

20230426.00-0ubuntu2~16.04.0
esm-apps/bionic

released

20230426.00-0ubuntu1~18.04.0
esm-apps/xenial

released

20230426.00-0ubuntu2~16.04.0
esm-infra/focal

released

20231004.02-0ubuntu1~20.04.3
focal

released

20231004.02-0ubuntu1~20.04.3
jammy

released

20231004.02-0ubuntu1~22.04.3
kinetic

ignored

end of life, was needed
lunar

ignored

end of life, was needed

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

released

2.3.7-0ubuntu0.16.04.1+esm2
esm-infra/xenial

released

2.3.7-0ubuntu0.16.04.1+esm2
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

not-affected

code not present
esm-infra-legacy/xenial

released

2.0.11-0ubuntu1~16.04.4+esm2
esm-infra/bionic

released

3.0.3-0ubuntu1~18.04.2+esm2
esm-infra/xenial

released

2.0.11-0ubuntu1~16.04.4+esm2
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 90%
0.04561
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
больше 3 лет назад

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS3: 7.5
nvd
больше 3 лет назад

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS3: 7.5
msrc
больше 1 года назад

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

CVSS3: 7.5
debian
больше 3 лет назад

A maliciously crafted HTTP/2 stream could cause excessive CPU consumpt ...

CVSS3: 7.5
github
больше 3 лет назад

golang.org/x/net vulnerable to Uncontrolled Resource Consumption

EPSS

Процентиль: 90%
0.04561
Низкий

7.5 High

CVSS3

Уязвимость CVE-2022-41723