FlawAtlas
Search the atlas
UBUNTU-CVE-2022-27664 High

UBUNTU-CVE-2022-27664

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Exploit probability Not scored
Published September 6, 2022
Required by Not available
Last source change June 23, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS golang-1.10

1 explicit affected versions

Ubuntu:16.04:LTS golang-1.10

2 explicit affected versions

Ubuntu:16.04:LTS golang-1.6

10 explicit affected versions

Ubuntu:18.04:LTS golang-1.10

8 explicit affected versions

Ubuntu:18.04:LTS golang-1.18

1 explicit affected versions

Ubuntu:18.04:LTS golang-1.8

2 explicit affected versions

Ubuntu:18.04:LTS golang-1.9

5 explicit affected versions

Ubuntu:20.04:LTS golang-1.13

9 explicit affected versions

Ubuntu:20.04:LTS golang-1.14

9 explicit affected versions

Ubuntu:20.04:LTS golang-1.16

1 explicit affected versions

Ubuntu:20.04:LTS golang-1.18

1 explicit affected versions

Ubuntu:20.04:LTS google-guest-agent

8 explicit affected versions

Ubuntu:22.04:LTS golang-1.13

2 explicit affected versions

Ubuntu:22.04:LTS golang-1.17

6 explicit affected versions

Ubuntu:22.04:LTS golang-1.18

6 explicit affected versions

Ubuntu:22.04:LTS google-guest-agent

9 explicit affected versions

Ubuntu:Pro:16.04:LTS golang-1.13

3 explicit affected versions

Ubuntu:Pro:16.04:LTS golang-golang-x-net-dev

5 explicit affected versions

Ubuntu:Pro:16.04:LTS google-guest-agent

8 explicit affected versions

Ubuntu:Pro:16.04:LTS juju-core

16 explicit affected versions

Ubuntu:Pro:16.04:LTS lxd

74 explicit affected versions

Ubuntu:Pro:18.04:LTS golang-1.13

3 explicit affected versions

Ubuntu:Pro:18.04:LTS golang-1.16

1 explicit affected versions

Ubuntu:Pro:18.04:LTS golang-golang-x-net-dev

4 explicit affected versions

Ubuntu:Pro:18.04:LTS google-guest-agent

13 explicit affected versions

Ubuntu:Pro:18.04:LTS lxd

21 explicit affected versions

Ubuntu:Pro:20.04:LTS adsys

5 explicit affected versions

Ubuntu:Pro:20.04:LTS golang-golang-x-net-dev

2 explicit affected versions

Ubuntu:Pro:22.04:LTS golang-golang-x-net

4 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2022-27664

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

View original source

05 / REFERENCES

Further evidence