Поиск уязвимостей
Количество 172
Количество 172
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-44487
MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consum ...
ROS-20240329-10
Множественные уязвимости cri-o
SUSE-SU-2023:3888-1
Security update for Golang Prometheus
SUSE-SU-2023:3886-1
Security update for grafana
SUSE-SU-2023:3263-1
Security update for go1.19
SUSE-SU-2023:3181-1
Security update for go1.20
GHSA-xc82-5m89-g4jv
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.
BDU:2023-06242
Уязвимость пакета crypto/tls языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2023:3841-1
Security update for go1.19-openssl
ALT-PU-2023-4711
ALT-PU-2023-4711: package `golang` update to version 1.20.7-alt1
ALT-PU-2023-4690
ALT-PU-2023-4690: package `golang` update to version 1.19.12-alt1
SUSE-SU-2023:4624-1
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
SUSE-SU-2023:4492-1
Security update for nghttp2
SUSE-SU-2023:4295-1
Security update for nodejs10
SUSE-SU-2023:4200-1
Security update for nghttp2
SUSE-SU-2023:4199-1
Security update for nghttp2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | CVSS3: 7.5 | 100% Критический | около 3 лет назад |
 | CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | CVSS3: 7.5 | 100% Критический | около 3 лет назад |
 | CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | CVSS3: 7.5 | 100% Критический | около 3 лет назад |
 | CVE-2023-44487 MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack | 100% Критический | около 3 лет назад | |
| CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consum ... | CVSS3: 7.5 | 100% Критический | около 3 лет назад |
 | ROS-20240329-10 Множественные уязвимости cri-o | CVSS3: 9.8 | больше 2 лет назад | |
 | SUSE-SU-2023:3888-1 Security update for Golang Prometheus | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3886-1 Security update for grafana | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3263-1 Security update for go1.19 | 2% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:3181-1 Security update for go1.20 | 2% Низкий | больше 3 лет назад | |
| GHSA-xc82-5m89-g4jv Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. | CVSS3: 5.3 | 2% Низкий | больше 3 лет назад |
 | BDU:2023-06242 Уязвимость пакета crypto/tls языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 2% Низкий | больше 3 лет назад |
| SUSE-SU-2023:3841-1 Security update for go1.19-openssl | около 3 лет назад | ||
| ALT-PU-2023-4711 ALT-PU-2023-4711: package `golang` update to version 1.20.7-alt1 | CVSS3: 5.3 | 2% Низкий | больше 3 лет назад |
| ALT-PU-2023-4690 ALT-PU-2023-4690: package `golang` update to version 1.19.12-alt1 | CVSS3: 5.3 | 2% Низкий | больше 3 лет назад |
| SUSE-SU-2023:4624-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container | 100% Критический | почти 3 года назад | |
| SUSE-SU-2023:4492-1 Security update for nghttp2 | 100% Критический | почти 3 года назад | |
| SUSE-SU-2023:4295-1 Security update for nodejs10 | 100% Критический | около 3 лет назад | |
| SUSE-SU-2023:4200-1 Security update for nghttp2 | 100% Критический | около 3 лет назад | |
| SUSE-SU-2023:4199-1 Security update for nghttp2 | 100% Критический | около 3 лет назад |
Уязвимостей на страницу