CVE-2022-41717 Excessive memory growth in net/http and golang.org/x/net/http2

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2023-24534 and CVE-2023-24536: Resource Consumption Vulnerabilities Identified Two vulnerabilities, CVE-2023-24534 and CVE-2023-24536, were published on April 6, 2023, affecting the net/http and net/textproto packages. These vulnerabilities are associated with excessive memory allocation and resource consumption, potentially impacting applications that rely on these packages. 4 sources 64