CVE-2022-27664

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-276656.1Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of maliCVE-2022-276667.8A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attaCVE-2022-276677.5Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacCVE-2022-276689.8Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to executeCVE-2022-276697.5An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to whicCVE-2022-27676.1A vulnerability classified as problematic has been found in SourceCodester Online Admission System. This affects an unknown part of the fileCVE-2022-276706.5SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server CVE-2022-276716.5A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.CVE-2022-276724.7When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode CVE-2022-276737.5Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.CVE-2022-276747.5Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to aCVE-2022-276777.8Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentiall
CVE-2022-27664: High severity, CVSS 7.5 | Vulnix