Описание
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | pending | 0.16.4ubuntu2 |
| esm-infra/focal | released | 0.9.2~20.04.2ubuntu0.1+esm2 |
| jammy | released | 0.16.3~22.04.2ubuntu0.22.04.1 |
| noble | released | 0.16.3~24.04.2ubuntu0.24.04.1 |
| questing | released | 0.16.3ubuntu0.25.10.2 |
| resolute | released | 0.16.4ubuntu1.1 |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | uses system package |
| esm-apps-legacy/xenial | released | 1.2.6-0ubuntu1~16.04.6+esm7 |
| esm-apps/bionic | released | 1.6.12-0ubuntu1~18.04.1+esm4 |
| esm-apps/noble | not-affected | uses system package |
| esm-apps/resolute | not-affected | uses system package |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra/focal | released | 1.6.12-0ubuntu1~20.04.8+esm2 |
| jammy | released | 1.6.12-0ubuntu1~22.04.11 |
| noble | not-affected | uses system package |
| questing | not-affected | uses system package |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.2.2-0ubuntu2 |
| esm-apps/focal | released | 1.7.24-0ubuntu1~20.04.2+esm2 |
| esm-apps/jammy | released | 2.2.1-0ubuntu1~22.04.2 |
| jammy | released | 2.2.1-0ubuntu1~22.04.2 |
| noble | released | 2.2.1-0ubuntu1~24.04.3 |
| questing | released | 2.2.1-0ubuntu1~25.10.2 |
| resolute | released | 2.2.2-0ubuntu1.1 |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.2.2-0ubuntu2 |
| jammy | DNE | |
| noble | DNE | |
| questing | released | 2.1.6-0ubuntu1~25.10.2 |
| resolute | released | 2.2.2-0ubuntu1.1 |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps/jammy | needed | |
| esm-apps/noble | needed | |
| esm-apps/resolute | needed | |
| jammy | needed | |
| noble | needed | |
| questing | ignored | end of life, was needed |
| resolute | needed | |
| upstream | released | v0.53.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra/focal | needs-triage | |
| jammy | needs-triage | |
| noble | needs-triage | |
| questing | ignored | end of life, was needs-triage |
| resolute | needs-triage | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/focal | needs-triage | |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/bionic | needs-triage | |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| jammy | DNE | |
| noble | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | needs-triage |
Показывать по
Ссылки на источники
7.5 High
CVSS3
Связанные уязвимости
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
When processing HTTP/2 SETTINGS frames, transport will enter an infini ...
7.5 High
CVSS3