Wind River Support Network

HomeDefectsLIN1021-2175
Fixed

LIN1021-2175 : Security Advisory - go - CVE-2021-44716

Created: Dec 9, 2021    Updated: Mar 11, 2022
Resolved Date: Mar 11, 2022
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

https://nvd.nist.gov/vuln/detail/CVE-2021-44716
Live chat
Online