CVE-2022-27664
CVE Details
Visit the official vulnerability details page for CVE-2022-27664 to learn more.
Initial Publication
10/25/2024
Last Update
02/14/2025
Third Party Dependency
go
NIST CVE Summary
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
CVE Severity
Our Official Summary
This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.
Status
Ongoing
Affected Products & Versions
This CVE is non-impacting as the impacting symbol and/or function is not used in the product
Revision History
No revisions available.