Към съдържанието
Търсене

CVE-2026-33814: golang.org/x/net/http2, невалидиран вход

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Засегнати продукти

  • golang.org/x/net golang.org/x/net/http2: преди 0.53.0
  • Go standard library net/http: преди 1.25.10; 1.26.0-0 преди 1.26.3
  • Red Hat Red Hat Enterprise Linux 10: 0:1.26.3-4.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:1.26.5-1.el10_0 преди *
  • Red Hat Red Hat Enterprise Linux 8: 8100020260518131104.a3795dee преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:1.26.3-1.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:1.26.5-1.el9_2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:1.26.5-1.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:1.26.5-1.el9_6 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 0:4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 0:4.20.37-202609041024.p0.g3d0d639.assembly.4.20.37.el9 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 0:4.21.0-202609021357.p2.g83d4961.assembly.stream.el10 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.22: 0:4.22.0-202608271248.p2.g83d4961.assembly.stream.el8 преди *
  • Red Hat Cluster Observability Operator 1.5.0: 1782840519 преди *
  • Red Hat multicluster engine for Kubernetes 2.11: 1786911952 преди *
  • Red Hat OpenShift API for Data Protection 1.6: 1784058822 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16: 1786908301 преди *
  • Red Hat Red Hat Hardened Images: 1.25.11-2.hum1 преди *
  • Red Hat Red Hat OpenShift AI 2.25: 1783544461 преди *
  • Red Hat Red Hat OpenShift AI 3.4: 1787002529 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 1786751663 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.14: 1788220426 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.15: 1787056066 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 1787547959 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.22: 1782932114 преди *
  • Red Hat Red Hat OpenShift distributed tracing 3.10.2: 1785704547 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.0: 1782222217 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.1: 1782222163 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.2: 1782226178 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.3: 1782223045 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.12: 1785202723 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.13: 1785203036 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.3: 1785203474 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.7: 1785203508 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.8: 1785203079 преди *
  • Red Hat Red Hat OpenShift Workload Availability 5.7: 1785202847 преди *
  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2
  • Red Hat Builds for Red Hat OpenShift
  • Red Hat cert-manager Operator for Red Hat OpenShift
  • Red Hat Compliance Operator
  • Red Hat Confidential Compute Attestation
  • Red Hat Cryostat 4
  • Red Hat Custom Metric Autoscaler operator for Red Hat Openshift
  • Red Hat Deployment Validation Operator
  • Red Hat ExternalDNS Operator
  • Red Hat External Secrets Operator for Red Hat OpenShift
  • Red Hat Fence Agents Remediation Operator
  • Red Hat File Integrity Operator
  • Red Hat Gatekeeper 3
  • Red Hat Logging Subsystem for Red Hat OpenShift
  • Red Hat Logical Volume Manager Storage
  • Red Hat Machine Deletion Remediation Operator
  • Red Hat Migration Toolkit for Applications 8
  • Red Hat Migration Toolkit for Containers
  • Red Hat Multiarch Tuning Operator
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Global Hub
  • Red Hat Network Observability Operator
  • Red Hat Node HealthCheck Operator
  • Red Hat OpenShift API for Data Protection
  • Red Hat OpenShift Developer Tools and Services
  • Red Hat OpenShift Lightspeed
  • Red Hat OpenShift Pipelines
  • Red Hat OpenShift Serverless
  • Red Hat OpenShift Service Mesh 2
  • Red Hat OpenShift Service Mesh 3
  • Red Hat Power monitoring for Red Hat OpenShift
  • Red Hat Red Hat 3scale API Management Platform 2
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Advanced Cluster Security 4
  • Red Hat Red Hat Ansible Automation Platform 2
  • Red Hat Red Hat Ceph Storage 5
  • Red Hat Red Hat Ceph Storage 6
  • Red Hat Red Hat Ceph Storage 7
  • Red Hat Red Hat Ceph Storage 8
  • Red Hat Red Hat Ceph Storage 9
  • Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
  • Red Hat Red Hat Connectivity Link 1
  • Red Hat Red Hat Developer Hub
  • Red Hat Red Hat Edge Manager 1
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Red Hat Lightspeed for Runtimes Operator
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat OpenShift Cluster Manager CLI
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat Openshift Data Foundation 4
  • Red Hat Red Hat OpenShift Dev Spaces
  • Red Hat Red Hat OpenShift Dev Workspaces Operator
  • Red Hat Red Hat OpenShift distributed tracing 3
  • Red Hat Red Hat OpenShift for Windows Containers
  • Red Hat Red Hat OpenShift GitOps
  • Red Hat Red Hat OpenShift on AWS
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenStack Platform 16.2
  • Red Hat Red Hat OpenStack Platform 17.1
  • Red Hat Red Hat OpenStack Platform 18.0
  • Red Hat Red Hat Quay 3
  • Red Hat Red Hat Satellite 6
  • Red Hat Red Hat Service Interconnect 2
  • Red Hat Red Hat Trusted Artifact Signer
  • Red Hat Red Hat Web Terminal
  • Red Hat Secrets Management Console for Red Hat OpenShift
  • Red Hat Security Profiles Operator
  • Red Hat Zero Trust Workload Identity Manager
  • Red Hat Zero Trust Workload Identity Manager - Tech Preview

Вид слабост

История

  • 7 май 2026 Публикувано

Други уязвимости в golang.org/x/net golang.org/x/net/http2

Първоизточници

CVE-2026-33814: golang.org/x/net/http2, невалидиран вход | freedomonline.bg