Skip to content

Commit c9eaa27

Browse files
julieqiugopherbot
authored andcommitted
data/reports: add missing alias to GO-2022-1144.yaml
Aliases: CVE-2022-41717, GHSA-xrjj-mj9h-534m Updates #1144 Fixes #1501 Change-Id: Ib2313bdf9ae45f2f138fcc637392606a60be5759 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/464317 Reviewed-by: Tatiana Bradley <[email protected]> Run-TryBot: Tatiana Bradley <[email protected]> Auto-Submit: Julie Qiu <[email protected]> TryBot-Result: Gopher Robot <[email protected]> Run-TryBot: Julie Qiu <[email protected]> Reviewed-by: Julie Qiu <[email protected]>
1 parent 395ce96 commit c9eaa27

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

data/osv/GO-2022-1144.json

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
{
2-
"schema_version": "1.3.1",
32
"id": "GO-2022-1144",
43
"published": "0001-01-01T00:00:00Z",
54
"modified": "0001-01-01T00:00:00Z",
65
"aliases": [
7-
"CVE-2022-41717"
6+
"CVE-2022-41717",
7+
"GHSA-xrjj-mj9h-534m"
88
],
99
"details": "An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.\n\nHTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.",
1010
"affected": [
@@ -111,5 +111,6 @@
111111
{
112112
"name": "Josselin Costanzi"
113113
}
114-
]
114+
],
115+
"schema_version": "1.3.1"
115116
}

data/reports/GO-2022-1144.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,8 @@ description: |
3737
client. While the total number of entries in this cache is capped, an
3838
attacker sending very large keys can cause the server to allocate
3939
approximately 64 MiB per open connection.
40+
ghsas:
41+
- GHSA-xrjj-mj9h-534m
4042
credit: Josselin Costanzi
4143
references:
4244
- report: https://go.dev/issue/56350

0 commit comments

Comments
 (0)