Lucene search

K
f5F5F5:K55518036
HistoryNov 03, 2021 - 12:00 a.m.

K55518036 : GO vulnerability CVE-2021-31525

2021-11-0300:00:00
my.f5.com
15

6.5 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%

Security Advisory Description

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations. (CVE-2021-31525)

Impact

There is no impact; F5 products are not affected by this vulnerability.