diff --git a/data/osv/GO-2023-1571.json b/data/osv/GO-2023-1571.json index 63f485b5..f4f7663d 100644 --- a/data/osv/GO-2023-1571.json +++ b/data/osv/GO-2023-1571.json @@ -3,7 +3,8 @@ "published": "0001-01-01T00:00:00Z", "modified": "0001-01-01T00:00:00Z", "aliases": [ - "CVE-2022-41723" + "CVE-2022-41723", + "GHSA-vvpx-j8f3-3w6h" ], "details": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.", "affected": [ diff --git a/data/osv/GO-2023-1572.json b/data/osv/GO-2023-1572.json index a2aecb05..511d2ad6 100644 --- a/data/osv/GO-2023-1572.json +++ b/data/osv/GO-2023-1572.json @@ -3,7 +3,8 @@ "published": "0001-01-01T00:00:00Z", "modified": "0001-01-01T00:00:00Z", "aliases": [ - "CVE-2022-41727" + "CVE-2022-41727", + "GHSA-qgc7-mgm3-q253" ], "details": "An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service.", "affected": [ diff --git a/data/reports/GO-2023-1571.yaml b/data/reports/GO-2023-1571.yaml index ef47a52f..012b1345 100644 --- a/data/reports/GO-2023-1571.yaml +++ b/data/reports/GO-2023-1571.yaml @@ -24,6 +24,8 @@ description: | A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. +ghsas: + - GHSA-vvpx-j8f3-3w6h credit: Philippe Antoine (Catena cyber) references: - report: https://go.dev/issue/57855 diff --git a/data/reports/GO-2023-1572.yaml b/data/reports/GO-2023-1572.yaml index 3a3555a7..17e7295c 100644 --- a/data/reports/GO-2023-1572.yaml +++ b/data/reports/GO-2023-1572.yaml @@ -15,6 +15,8 @@ description: | An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service. +ghsas: + - GHSA-qgc7-mgm3-q253 credit: Philippe Antoine (Catena cyber) and OSS Fuzz references: - report: https://go.dev/issue/58003