Bug 883665 (CVE-2022-27664)

Summary:	[Tracker] Denial of service in Go's net/http
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	883653, 869002
Bug Blocks:

Description John Helmert III archtester

2022-11-29 19:25:37 UTC

CVE-2022-27664:

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.