CVE-2021-31525

5.9

MEDIUMCVSS v3

Published

May 27, 2021

CVSS v2

2.6 LOW

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

golang/go

GitHubThe Go programming language

>= 1.16.0, < 1.16.4, < 1.15.12NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 34NVD

fedora

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Placeholder for the fedora name

= 34NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 34NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 34NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 34NVD

Security Advisories

CVE-2021-31525

Description

More on this CVE