Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-44716

Fixed in a distro release EPSS 4%

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Published 2022-01-01 · CVE record · OSV

Products: golang go, debian_linux, netapp cloud_insights_telegraf

Fixed upstream

EcosystemPackageFixed in
Gogolang.org/x/net0.0.0-20211209124913-491a49abca63
Gogolang.org/x/net/http20.0.0-20211209124913-491a49abca63
Gostdlib1.16.12
Gostdlib1.17.5

Distro releases

ReleasePackageFixed in
AlmaLinux 8delve1.6.0-1.module_el8.5.0+2604+960c7771
AlmaLinux 8go-toolset1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang-bin1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang-docs1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang-misc1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang-race1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang-src1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8golang-tests1.16.12-1.module_el8.5.0+2604+960c7771
AlmaLinux 8grafana7.5.9-5.el8_5
Amazon Linux 2golang1.16.15-1.amzn2.0.1
Amazon Linux 2golang-bin1.16.15-1.amzn2.0.1
Amazon Linux 2golang-docs1.16.15-1.amzn2.0.1
Amazon Linux 2golang-misc1.16.15-1.amzn2.0.1
Amazon Linux 2golang-race1.16.15-1.amzn2.0.1
Amazon Linux 2golang-shared1.16.15-1.amzn2.0.1
Amazon Linux 2golang-src1.16.15-1.amzn2.0.1
Amazon Linux 2golang-tests1.16.15-1.amzn2.0.1
Amazon Linux 2023golang1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-bin1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-docs1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-misc1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-race1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-shared1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-src1.19.3-2.amzn2023.0.2
Amazon Linux 2023golang-tests1.19.3-2.amzn2023.0.2
Arch Linuxgo2:1.17.5-1
Debian 10golang-1.111.11.6-1+deb10u6
Debian 12golang-golang-x-net1:0.0+git20211209.491a49a+dfsg-1
Debian 13golang-golang-x-net1:0.0+git20211209.491a49a+dfsg-1
Debian 14golang-golang-x-net1:0.0+git20211209.491a49a+dfsg-1
Debian 9golang-1.71.7.4-2+deb9u4
Debian 9golang-1.81.8.1-1+deb9u4
Red Hat container native virtualization 4.12kubevirt0:4.12.0-1057.el8
Red Hat container native virtualization 4.12kubevirt0:4.12.0-1057.el7
Red Hat container native virtualization 4.12kubevirt-virtctl0:4.12.0-1057.el8
Red Hat container native virtualization 4.12kubevirt-virtctl0:4.12.0-1057.el7
Red Hat container native virtualization 4.12kubevirt-virtctl-redistributable0:4.12.0-1057.el8
Red Hat container native virtualization 4.12kubevirt-virtctl-redistributable0:4.12.0-1057.el7
Red Hat devtools 2021go-toolset-1.160:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-build0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang-bin0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang-docs0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang-misc0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang-race0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang-src0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-golang-tests0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-runtime0:1.16.12-1.el7_9
Red Hat devtools 2021go-toolset-1.16-scldevel0:1.16.12-1.el7_9
Red Hat Enterprise Linux 8delve0:1.6.0-1.module+el8.5.0+10379+d6b83bd0
Red Hat Enterprise Linux 8delve-debuginfo0:1.6.0-1.module+el8.5.0+10379+d6b83bd0
Red Hat Enterprise Linux 8delve-debugsource0:1.6.0-1.module+el8.5.0+10379+d6b83bd0
Red Hat Enterprise Linux 8go-toolset0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang-bin0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang-docs0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang-misc0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang-race0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang-src0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8golang-tests0:1.16.12-1.module+el8.5.0+13637+960c7771
Red Hat Enterprise Linux 8grafana0:7.5.9-5.el8_5
Red Hat Enterprise Linux 8grafana-debuginfo0:7.5.9-5.el8_5
Red Hat openshift 4.10containernetworking-plugins0:0.9.1-2.rhaos4.10.el8
Red Hat openshift 4.10containernetworking-plugins-debuginfo0:0.9.1-2.rhaos4.10.el8
Red Hat openshift 4.10containernetworking-plugins-debugsource0:0.9.1-2.rhaos4.10.el8
Red Hat openshift 4.10coreos-installer0:0.12.0-1.rhaos4.10.el8
Red Hat openshift 4.10coreos-installer-bootinfra0:0.12.0-1.rhaos4.10.el8
Red Hat openshift 4.10coreos-installer-bootinfra-debuginfo0:0.12.0-1.rhaos4.10.el8
Red Hat openshift 4.10coreos-installer-debuginfo0:0.12.0-1.rhaos4.10.el8
Red Hat openshift 4.10coreos-installer-debugsource0:0.12.0-1.rhaos4.10.el8
Red Hat openshift 4.10cri-o0:1.23.0-92.rhaos4.10.gitdaab4d1.el7
Red Hat openshift 4.10cri-o0:1.23.1-9.rhaos4.10.gitbdffb9a.el8
Red Hat openshift 4.10cri-o-debuginfo0:1.23.0-92.rhaos4.10.gitdaab4d1.el7
Red Hat openshift 4.10cri-o-debuginfo0:1.23.1-9.rhaos4.10.gitbdffb9a.el8
Red Hat openshift 4.10cri-o-debugsource0:1.23.1-9.rhaos4.10.gitbdffb9a.el8
Red Hat openshift 4.10jenkins0:2.319.2.1643288987-1.el8
Red Hat openshift 4.10jenkins-2-plugins0:4.10.1643404185-1.el8
Red Hat openshift 4.10openshift0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8
Red Hat openshift 4.10openshift0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7
Red Hat openshift 4.10openshift-clients0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8
Red Hat openshift 4.10openshift-clients0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7
Red Hat openshift 4.10openshift-clients-redistributable0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8
Red Hat openshift 4.10openshift-clients-redistributable0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7
Red Hat openshift 4.10openshift-hyperkube0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8
Red Hat openshift 4.10openshift-hyperkube0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7
Red Hat openshift 4.10runc3:1.1.0-2.rhaos4.10.el8
Red Hat openshift 4.10runc-debuginfo3:1.1.0-2.rhaos4.10.el8
Red Hat openshift 4.10runc-debugsource3:1.1.0-2.rhaos4.10.el8
Red Hat openshift 4.9butane0:0.13.1-2.rhaos4.9.el8
Red Hat openshift 4.9butane-debuginfo0:0.13.1-2.rhaos4.9.el8
Red Hat openshift 4.9butane-debugsource0:0.13.1-2.rhaos4.9.el8
Red Hat openshift 4.9butane-redistributable0:0.13.1-2.rhaos4.9.el8
Red Hat openshift 4.9cri-o0:1.22.1-17.rhaos4.9.git3029b1d.el7
Red Hat openshift 4.9cri-o0:1.22.1-17.rhaos4.9.git3029b1d.2.el8
Red Hat openshift 4.9cri-o-debuginfo0:1.22.1-17.rhaos4.9.git3029b1d.el7
Red Hat openshift 4.9cri-o-debuginfo0:1.22.1-17.rhaos4.9.git3029b1d.2.el8
Red Hat openshift 4.9cri-o-debugsource0:1.22.1-17.rhaos4.9.git3029b1d.2.el8
Red Hat openshift 4.9cri-tools0:1.22.0-2.el8
Red Hat openshift 4.9cri-tools-debuginfo0:1.22.0-2.el8
Red Hat openshift 4.9cri-tools-debugsource0:1.22.0-2.el8
Red Hat openshift 4.9golang-github-prometheus-promu0:0.5.0-5.git642a960.el8
Red Hat openshift 4.9ignition0:2.12.0-3.rhaos4.9.el8
Red Hat openshift 4.9ignition-debuginfo0:2.12.0-3.rhaos4.9.el8
Red Hat openshift 4.9ignition-debugsource0:2.12.0-3.rhaos4.9.el8
Red Hat openshift 4.9ignition-validate0:2.12.0-3.rhaos4.9.el8
Red Hat openshift 4.9ignition-validate-debuginfo0:2.12.0-3.rhaos4.9.el8
Red Hat openshift 4.9openshift0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7
Red Hat openshift 4.9openshift0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8
Red Hat openshift 4.9openshift-clients0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7
Red Hat openshift 4.9openshift-clients0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8
Red Hat openshift 4.9openshift-clients-redistributable0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7
Red Hat openshift 4.9openshift-clients-redistributable0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8
Red Hat openshift 4.9openshift-hyperkube0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7
Red Hat openshift 4.9openshift-hyperkube0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8
Red Hat openshift 4.9prometheus-promu0:0.5.0-5.git642a960.el8
Red Hat openshift data foundation 4.10mcg0:5.10.0-72.el8
Red Hat openshift data foundation 4.10mcg-redistributable0:5.10.0-72.el8
Red Hat openstack 16.1etcd0:3.3.23-7.el8ost
Red Hat openstack 16.1etcd-debuginfo0:3.3.23-7.el8ost
Red Hat openstack 16.1etcd-debugsource0:3.3.23-7.el8ost
Red Hat openstack 16.2etcd0:3.3.23-7.el8ost
Red Hat openstack 16.2etcd-debuginfo0:3.3.23-7.el8ost
Red Hat openstack 16.2etcd-debugsource0:3.3.23-7.el8ost
Red Hat rhel eus 8.4grafana0:7.3.6-4.el8_4
Red Hat rhel eus 8.4grafana-debuginfo0:7.3.6-4.el8_4
Red Hat serverless 1.0openshift-serverless-clients0:1.0.0-2.el8
Red Hat storage 3.5 wa el7etcd0:3.3.23-9.el7rhgs
Red Hat storage 3.5 wa el7etcd-debuginfo0:3.3.23-9.el7rhgs
Red Hat storage 3.5 wa el7grafana0:5.2.4-5.el7rhgs
Rocky Linux 8delve0:1.6.0-1.module+el8.5.0+694+f77f0bfd
Rocky Linux 8go-toolset0:1.16.12-1.module+el8.5.0+720+c057d5cf
Rocky Linux 8golang0:1.16.12-1.module+el8.5.0+720+c057d5cf
Rocky Linux 8grafana0:7.5.9-5.el8_5
SUSE Enterprise Storage 7go1.161.16.12-1.37.2
SUSE Enterprise Storage 7go1.171.17.5-1.14.2
SUSE HPE Helion OpenStack 8ardana-ansible8.0+git.1660773729.3789a6d-3.85.1
SUSE HPE Helion OpenStack 8ardana-cobbler8.0+git.1660773402.d845a45-3.47.1
SUSE HPE Helion OpenStack 8grafana6.7.4-4.23.1
SUSE HPE Helion OpenStack 8openstack-heat-templates0.0.0+git.1654529662.75fa04a-3.27.1
SUSE HPE Helion OpenStack 8openstack-murano4.0.2~dev3-3.12.1
SUSE HPE Helion OpenStack 8openstack-murano-doc4.0.2~dev3-3.12.1
SUSE HPE Helion OpenStack 8python-Django1.11.29-3.42.1
SUSE HPE Helion OpenStack 8rabbitmq-server3.6.16-3.13.1
SUSE HPE Helion OpenStack 8venv-openstack-heat9.0.8~dev22-12.45.1
SUSE HPE Helion OpenStack 8venv-openstack-horizon-hpe12.0.5~dev6-14.48.1
SUSE HPE Helion OpenStack 8venv-openstack-murano4.0.2~dev3-12.38.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSgo1.161.16.12-1.37.2
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSgo1.171.17.5-1.14.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSgo1.161.16.12-1.37.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSgo1.171.17.5-1.14.2
SUSE Linux Enterprise Module for Development Tools 15 SP2go1.161.16.12-1.37.2
SUSE Linux Enterprise Module for Development Tools 15 SP2go1.171.17.5-1.14.2
SUSE Linux Enterprise Module for Development Tools 15 SP3go1.161.16.12-1.37.2
SUSE Linux Enterprise Module for Development Tools 15 SP3go1.171.17.5-1.14.2
SUSE Linux Enterprise Server 15 SP2-BCLgo1.161.16.12-1.37.2
SUSE Linux Enterprise Server 15 SP2-BCLgo1.171.17.5-1.14.2
SUSE Linux Enterprise Server 15 SP2-LTSSgo1.161.16.12-1.37.2
SUSE Linux Enterprise Server 15 SP2-LTSSgo1.171.17.5-1.14.2
SUSE Linux Enterprise Server for SAP Applications 15 SP2go1.161.16.12-1.37.2
SUSE Linux Enterprise Server for SAP Applications 15 SP2go1.171.17.5-1.14.2
SUSE Manager Proxy 4.1go1.161.16.12-1.37.2
SUSE Manager Proxy 4.1go1.171.17.5-1.14.2
SUSE Manager Retail Branch Server 4.1go1.161.16.12-1.37.2
SUSE Manager Retail Branch Server 4.1go1.171.17.5-1.14.2
SUSE Manager Server 4.1go1.161.16.12-1.37.2
SUSE Manager Server 4.1go1.171.17.5-1.14.2
SUSE OpenStack Cloud 8ardana-ansible8.0+git.1660773729.3789a6d-3.85.1
SUSE OpenStack Cloud 8ardana-cobbler8.0+git.1660773402.d845a45-3.47.1
SUSE OpenStack Cloud 8grafana6.7.4-4.23.1
SUSE OpenStack Cloud 8openstack-heat-templates0.0.0+git.1654529662.75fa04a-3.27.1
SUSE OpenStack Cloud 8openstack-murano4.0.2~dev3-3.12.1
SUSE OpenStack Cloud 8openstack-murano-doc4.0.2~dev3-3.12.1
SUSE OpenStack Cloud 8python-Django1.11.29-3.42.1
SUSE OpenStack Cloud 8rabbitmq-server3.6.16-3.13.1
SUSE OpenStack Cloud 8venv-openstack-heat9.0.8~dev22-12.45.1
SUSE OpenStack Cloud 8venv-openstack-horizon12.0.5~dev6-14.48.1
SUSE OpenStack Cloud 8venv-openstack-murano4.0.2~dev3-12.38.1
SUSE OpenStack Cloud 9ardana-barbican9.0+git.1644879908.8a641c1-3.13.1
SUSE OpenStack Cloud 9grafana6.7.4-3.26.1
SUSE OpenStack Cloud 9openstack-barbican7.0.1~dev24-3.14.1
SUSE OpenStack Cloud 9openstack-cinder13.0.10~dev24-3.34.2
SUSE OpenStack Cloud 9openstack-heat-gbp14.0.1~dev4-3.9.1
SUSE OpenStack Cloud 9openstack-horizon-plugin-gbp-ui14.0.1~dev3-3.9.1
SUSE OpenStack Cloud 9openstack-ironic11.1.5~dev18-3.28.2
SUSE OpenStack Cloud 9openstack-keystone14.2.1~dev9-3.28.2
SUSE OpenStack Cloud 9openstack-neutron13.0.8~dev206-3.40.1
SUSE OpenStack Cloud 9openstack-neutron-gbp14.0.1~dev33-3.31.1
SUSE OpenStack Cloud 9python-Pillow5.2.0-3.17.1
SUSE OpenStack Cloud 9python-XStatic-jquery-ui1.13.0.1-4.3.1
SUSE OpenStack Cloud 9python-lxml4.2.4-3.3.1
SUSE OpenStack Cloud 9release-notes-suse-openstack-cloud9.20220413-3.30.1
SUSE OpenStack Cloud 9venv-openstack-barbican7.0.1~dev24-3.35.2
SUSE OpenStack Cloud 9venv-openstack-cinder13.0.10~dev24-3.38.1
SUSE OpenStack Cloud 9venv-openstack-designate7.0.2~dev2-3.35.1
SUSE OpenStack Cloud 9venv-openstack-glance17.0.1~dev30-3.33.1
SUSE OpenStack Cloud 9venv-openstack-heat11.0.4~dev4-3.35.1
SUSE OpenStack Cloud 9venv-openstack-horizon14.1.1~dev11-4.39.1
SUSE OpenStack Cloud 9venv-openstack-ironic11.1.5~dev18-4.33.1
SUSE OpenStack Cloud 9venv-openstack-keystone14.2.1~dev9-3.36.1
SUSE OpenStack Cloud 9venv-openstack-magnum7.2.1~dev1-4.35.1
SUSE OpenStack Cloud 9venv-openstack-manila7.4.2~dev60-3.41.1
SUSE OpenStack Cloud 9venv-openstack-monasca2.7.1~dev10-3.37.1
SUSE OpenStack Cloud 9venv-openstack-monasca-ceilometer1.8.2~dev3-3.35.1
SUSE OpenStack Cloud 9venv-openstack-neutron13.0.8~dev206-6.39.1
SUSE OpenStack Cloud 9venv-openstack-nova18.3.1~dev91-3.39.1
SUSE OpenStack Cloud 9venv-openstack-octavia3.2.3~dev7-4.35.1
SUSE OpenStack Cloud 9venv-openstack-sahara9.0.2~dev15-3.35.1
SUSE OpenStack Cloud 9venv-openstack-swift2.19.2~dev48-2.30.1
SUSE OpenStack Cloud Crowbar 8grafana6.7.4-4.23.1
SUSE OpenStack Cloud Crowbar 8openstack-heat-templates0.0.0+git.1654529662.75fa04a-3.27.1
SUSE OpenStack Cloud Crowbar 8openstack-murano4.0.2~dev3-3.12.1
SUSE OpenStack Cloud Crowbar 8openstack-murano-doc4.0.2~dev3-3.12.1
SUSE OpenStack Cloud Crowbar 8python-Django1.11.29-3.42.1
SUSE OpenStack Cloud Crowbar 8rabbitmq-server3.6.16-3.13.1
SUSE OpenStack Cloud Crowbar 8rubygem-puma2.16.0-3.18.1
SUSE OpenStack Cloud Crowbar 9grafana6.7.4-3.26.1
SUSE OpenStack Cloud Crowbar 9openstack-barbican7.0.1~dev24-3.14.1
SUSE OpenStack Cloud Crowbar 9openstack-cinder13.0.10~dev24-3.34.2
SUSE OpenStack Cloud Crowbar 9openstack-heat-gbp14.0.1~dev4-3.9.1
SUSE OpenStack Cloud Crowbar 9openstack-horizon-plugin-gbp-ui14.0.1~dev3-3.9.1
SUSE OpenStack Cloud Crowbar 9openstack-ironic11.1.5~dev18-3.28.2
SUSE OpenStack Cloud Crowbar 9openstack-keystone14.2.1~dev9-3.28.2
SUSE OpenStack Cloud Crowbar 9openstack-neutron13.0.8~dev206-3.40.1
SUSE OpenStack Cloud Crowbar 9openstack-neutron-gbp14.0.1~dev33-3.31.1
SUSE OpenStack Cloud Crowbar 9python-Pillow5.2.0-3.17.1
SUSE OpenStack Cloud Crowbar 9python-XStatic-jquery-ui1.13.0.1-4.3.1
SUSE OpenStack Cloud Crowbar 9python-lxml4.2.4-3.3.1
SUSE OpenStack Cloud Crowbar 9release-notes-suse-openstack-cloud9.20220413-3.30.1
SUSE OpenStack Cloud Crowbar 9rubygem-sinatra1.4.6-4.3.1
Ubuntu 18.04 LTSgolang-1.8no fix
Ubuntu 20.04 LTSgoogle-guest-agent20231004.02-0ubuntu1~20.04.3
Ubuntu 22.04 LTSgolang-1.17no fix
Ubuntu 22.04 LTSgoogle-guest-agent20231004.02-0ubuntu1~22.04.3
Ubuntu Pro 16.04 LTSgolang-golang-x-net-devno fix
Ubuntu Pro 16.04 LTSgoogle-guest-agentno fix
Ubuntu Pro 18.04 LTSgolang-golang-x-net-devno fix
Ubuntu Pro 18.04 LTSgoogle-guest-agentno fix
Ubuntu Pro 20.04 LTSgolang-golang-x-net-devno fix
openSUSE Leap 15.2go1.161.16.12-lp152.20.1
openSUSE Leap 15.3go1.161.16.12-1.37.2
openSUSE Leap 15.3go1.171.17.5-1.14.2
openSUSE Leap 15.4apptainer1.1.2-lp154.2.1
openSUSE Tumbleweedgo1.161.16.12-1.1
openSUSE Tumbleweedgo1.171.17.5-1.1