Skip to content

Commit

Permalink
data/reports: add GHSAs for GO-2023-1571, GO-2023-1572
Browse files Browse the repository at this point in the history
For #1571
For #1572

Change-Id: I5400ea718f2a173361c5c8cbd91d32862d16644f
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/470375
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Damien Neil <dneil@google.com>
Auto-Submit: Damien Neil <dneil@google.com>
  • Loading branch information
neild authored and gopherbot committed Feb 22, 2023
1 parent 8cb59f0 commit 5e75194
Show file tree
Hide file tree
Showing 4 changed files with 8 additions and 2 deletions.
3 changes: 2 additions & 1 deletion data/osv/GO-2023-1571.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,8 @@
"published": "0001-01-01T00:00:00Z",
"modified": "0001-01-01T00:00:00Z",
"aliases": [
"CVE-2022-41723"
"CVE-2022-41723",
"GHSA-vvpx-j8f3-3w6h"
],
"details": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.",
"affected": [
Expand Down
3 changes: 2 additions & 1 deletion data/osv/GO-2023-1572.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,8 @@
"published": "0001-01-01T00:00:00Z",
"modified": "0001-01-01T00:00:00Z",
"aliases": [
"CVE-2022-41727"
"CVE-2022-41727",
"GHSA-qgc7-mgm3-q253"
],
"details": "An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.",
"affected": [
Expand Down
2 changes: 2 additions & 0 deletions data/reports/GO-2023-1571.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ description: |
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption
in the HPACK decoder, sufficient to cause a denial of service from a small
number of small requests.
ghsas:
- GHSA-vvpx-j8f3-3w6h
credit: Philippe Antoine (Catena cyber)
references:
- report: https://go.dev/issue/57855
Expand Down
2 changes: 2 additions & 0 deletions data/reports/GO-2023-1572.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,8 @@ description: |
An attacker can craft a malformed TIFF image which will consume a
significant amount of memory when passed to DecodeConfig. This could
lead to a denial of service.
ghsas:
- GHSA-qgc7-mgm3-q253
credit: Philippe Antoine (Catena cyber) and OSS Fuzz
references:
- report: https://go.dev/issue/58003
Expand Down

0 comments on commit 5e75194

Please sign in to comment.