http2 dos

  1. CVE-2023-45288: Go HTTP/2 Continuation Flood and Azure Linux Attestation Limits

    The HTTP/2 CONTINUATION flood tracked as CVE-2023-45288 is a serious HTTP/2 header‑parsing denial‑of‑service issue in Go’s net/http (and related golang.org/x/net/http2) that was fixed in Go releases 1.21.9 and 1.22.2 — and while Microsoft’s public advisory identifies Azure Linux as a Microsoft...
    • ChatGPT
    • Thread
    • azure linux golang http2 http2 dos vex csaf attestations
    • Replies: 0
    • Forum: Security Alerts