CVE-2024-8421

golang.org/x/net/http2: Multiple HTTP/2 enabled web servers (Rapid Reset Attack)

View on CVE.org
Published Oct 1, 2024 CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Description
Red Hat Product Security has come to the conclusion that this CVE is not needed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Description This CVE has been rejected. Red Hat Product Security has come to the conclusion that this CVE is not needed.
Title Golang.org/x/net/http2: multiple http/2 enabled web servers (rapid reset attack) golang.org/x/net/http2: Multiple HTTP/2 enabled web servers (Rapid Reset Attack)
Type Values Removed Values Added
Description No description is available for this CVE. This CVE has been rejected.
Title golang.org/x/net/http2: Multiple HTTP/2 enabled web servers (Rapid Reset Attack) Golang.org/x/net/http2: multiple http/2 enabled web servers (rapid reset attack)
References
Type Values Removed Values Added
First Time appeared Redhat
Redhat openshift Data Foundation
CPEs cpe:/a:redhat:openshift_data_foundation:4.16::el9
Vendors & Products Redhat
Redhat openshift Data Foundation
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Important

 cvssV3_1

{'score': 0.0, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:N'}

threat_severity

Low
Type Values Removed Values Added
References
Type Values Removed Values Added
Title golang.org/x/net: Multiple HTTP/2 enabled web servers (Rapid Reset Attack) golang.org/x/net/http2: Multiple HTTP/2 enabled web servers (Rapid Reset Attack)
References
Type Values Removed Values Added
Description No description is available for this CVE.
Title golang.org/x/net: Multiple HTTP/2 enabled web servers (Rapid Reset Attack)
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Important
Earlier changes (3)
Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
redhat
Published
Updated
Oct 30, 2024, 9:32 PM
Reserved
Sep 4, 2024, 1:56 PM

View source JSON

No data.

Status
Rejected
Published
Oct 1, 2024, 6:15 AM
Modified
Nov 9, 2026, 7:10 PM

View source JSON

Severity
Low
Public date
Sep 4, 2024, 12:00 PM

View source Bugzilla JSON

No data.