CVE-2021-44716
UnscoredAdvisory
Published 15 Jul 2022In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 901
- of 17,787 indexed, latest versions
- Container images
- 950
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Unbounded memory growth in net/http and golang.org/x/net/http2
Carried by container images the latest versions of 901 of 17,787 indexed charts deploy, on 950 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+57 more | 1.16.12 | 797 |
| golang.org/ | v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+116 more | 0.0.0-20211209124913-491a49abca63 | 750 |
- OSV records
- GO-2022-0288
- Also known as
- BIT-golang-2021-44716, GHSA-vc3p-29h2-gpcp
Charts affected
901 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zookeeper-exporterzookeeper-exporter | 0.1.0 | 1 of 1See more | 1,248 |
Container images carrying it
950 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | bed6f4ec2e82 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | ccd2ce03b682 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | e159ba41aede | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 19b18fd97eab | stdlib | 1.16.12 | 1 |
| ghcr.io/ | b360d44125ad | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 6b3215e37738 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 627e5e211766 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 073116e61007 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | bcd5b8d4c45c | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 56a1ea4490ba | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 6a8546993cb5 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | da81246ccfc9 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 7ed73c1979ee | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | ec6d67fbedfa | stdlib | 1.16.12 | 1 |
| ghcr.io/ | feffc0b8227d | stdlib | 1.16.12 | 1 |
| ghcr.io/ | c966a4f8a4b7 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | b3a87f92a963 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | fdb5501cdfb9 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 241592d93640 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 0d6d0df98fe4 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 827aa2f2389d | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 54ebc1f90963 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | cbd5d4cc1245 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 0792c7e6d814 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | ef3670f7e0a8 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | c863aa9875fa | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 61deadd1ec78 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | ad943e9309e4 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | c2d6e775db5a | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 4ea617c30397 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 448045c4270b | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 292b3614670f | stdlib | 1.16.12 | 1 |
| ghcr.io/ | e72aa733faf2 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 57419b6d3830 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 4ed7a896dd2b | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 47f88b18fb7c | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 00ce11c31087 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 087618d16b83 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 8e7b44bbd123 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 5e409a6332b4 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | d523c2c010cd | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 23dc6274cc4b | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 0b2a41c2a43e | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | ded797477896 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | e949b0f733f0 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | a544a71c6e3b | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| ghcr.io/ | 441da62e6cb3 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| ghcr.io/ | 71e24278a049 | stdlib | 1.16.12 | 1 |
| ghcr.io/ | 2fe6b69b20d7 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |