NVD Vulnerability Detail

CVE-2022-27664

Summary	In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
Publication Date	Sept. 7, 2022, 3:15 a.m.
Registration Date	Sept. 7, 2022, 10 a.m.
Last Update	Nov. 21, 2024, 3:56 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://groups.google.com/g/golang-announce	Mailing List Third Party Advisory
2	https://groups.google.com/g/golang-announce	Mailing List Third Party Advisory
3	https://groups.google.com/g/golang-announce/c/x49AQzIVX-s	Mailing List Release Notes Third Party Advisory
4	https://groups.google.com/g/golang-announce/c/x49AQzIVX-s	Mailing List Release Notes Third Party Advisory
5	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/
6	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/
7	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/
8	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/
9	https://security.gentoo.org/glsa/202209-26	Third Party Advisory
10	https://security.gentoo.org/glsa/202209-26	Third Party Advisory
11	https://security.netapp.com/advisory/ntap-20220923-0004/	Third Party Advisory
12	https://security.netapp.com/advisory/ntap-20220923-0004/	Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

The Go Project の Go 他複数ベンダの製品における脆弱性

Title	The Go Project の Go 他複数ベンダの製品における脆弱性
Summary	The Go Project の Go 他複数ベンダの製品には、不特定の脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	参考情報を参照して適切な対策を実施してください。
Publication Date	Sept. 6, 2022, midnight
Registration Date	Oct. 4, 2023, 5:59 p.m.
Last Update	Oct. 4, 2023, 5:59 p.m.

Affected System

Fedora Project

Fedora 36

Fedora 37

The Go Project

Go 1.18.6 未満

Go 1.19.0

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-27664	https://www.cve.org/CVERecord?id=CVE-2022-27664
National Vulnerability Database (NVD)
2	CVE-2022-27664	https://nvd.nist.gov/vuln/detail/CVE-2022-27664

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

その他

No	Name	URL
関連文書
1	groups.google.com (golang-announce)	https://groups.google.com/g/golang-announce
2	groups.google.com (x49AQzIVX-s)	https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
3	lists.fedoraproject.org (JXKTHIGE5F576MAPFYCIJXNRGBSPISUF)	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/
4	lists.fedoraproject.org (TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX)	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/
5	security.gentoo.org (202209-26)	https://security.gentoo.org/glsa/202209-26
6	security.netapp.com (ntap-20220923-0004)	https://security.netapp.com/advisory/ntap-20220923-0004/

Change Log

No	Changed Details	Date of change
1	[2023年10月04日] 掲載	Oct. 4, 2023, 5:59 p.m.