Lucene search
Redhat.comRH:CVE-2024-24791HistoryJul 04, 2024 - 5:21 p.m.
CVE-2024-24791
2024-07-0417:21:05
redhat.com
access.redhat.com
13
net/http
http/1.1
mishandles
denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
High
A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.
Related
osv
osv
CGA-fw65-hvqv-3f76
2024-07-15 21:57:44
CGA-rrgc-x39v-9w8c
2024-07-15 22:06:57
CGA-7q93-27rj-v79f
2024-07-15 21:52:15
nessus
nessus
SUSE SLES12 Security Update : go1.21 (SUSE-SU-2024:2294-1)
2024-07-04 00:00:00
cve
cve
CVE-2024-24791
2024-07-02 22:15:04
vulnrichment
vulnrichment
freebsd
freebsd
go -- net/http: denial of service due to improper 100-continue handling
2024-07-02 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-24791 affecting package golang for versions less than 1.22.5-1
2024-09-19 09:11:51
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.2
Confidence
High
Related for RH:CVE-2024-24791