CVE-2021-44716
UnscoredAdvisory
Published 15 Jul 2022In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.040
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 901
- of 17,790 indexed, latest versions
- Container images
- 950
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Unbounded memory growth in net/http and golang.org/x/net/http2
Carried by container images the latest versions of 901 of 17,790 indexed charts deploy, on 950 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+57 more | 1.16.12 | 797 |
| golang.org/ | v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+116 more | 0.0.0-20211209124913-491a49abca63 | 750 |
- OSV records
- GO-2022-0288
- Also known as
- BIT-golang-2021-44716, GHSA-vc3p-29h2-gpcp
Charts affected
901 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zookeeper-exporterzookeeper-exporter | 0.1.0 | 1 of 1See more | 1,248 |
Container images carrying it
950 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 81b2d775edad | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | ada7edd90bec | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | fd798a5a773e | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | e045b26eb6df | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 09d52508fee9 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 15fa0ed662b1 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 36ce77526145 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 4fbd63194674 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 34de6387233b | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 6d56f69b15a3 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | c4635c95730e | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 21164241c045 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 58cb99053bb3 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | a1c3843b03bc | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 107a7c73af59 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 791aef35b8d1 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | ecd26b74a01f | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | febeebebe762 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | 6722d5041b47 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 0bbe8b451fa3 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 0d21ba756f44 | stdlib | 1.16.12 | 1 |
| quay.io/ | c6a934439421 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 3f6d9885cfe2 | stdlib | 1.16.12 | 1 |
| quay.io/ | 9f01c9c5c2e3 | stdlib | 1.16.12 | 1 |
| quay.io/ | fd8bb57ef3cf | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | 879b9bead838 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | 7b4202c25b67 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 0290e7b2800a | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| quay.io/ | 6ba82beff18e | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 87f0398ec7ff | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | e362f02ed304 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 379efe0c2541 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | c6591da87aa8 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | 21e6d6a155dc | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| quay.io/ | be3a5846922d | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.gitlab.com/ | 864fc338571e | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.gitlab.com/ | 7a6f84b81c4e | stdlib | 1.16.12 | 1 |
| registry.gitlab.com/ | 28c3e5eb2650 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.gitlab.com/ | e0ab1fc86761 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.gitlab.com/ | cf72810d33f5 | stdlib | 1.16.12 | 1 |
| registry.gitlab.com/ | 36b19b72120e | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| registry.gitlab.com/ | 9d1fcb78f529 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | e07f914c32f0 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | 6e0546563b18 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | 818f35653f2e | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | 89e900a160a9 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | 92257881c1d6 | golang.org/ | 0.0.0-20211209124913-491a49abca63 | 1 |
| registry.k8s.io/ | 3ce0fdba4d8e | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | 95587f8777d7 | golang.org/ stdlib | 0.0.0-20211209124913-491a49abca63 1.16.12 | 1 |
| registry.k8s.io/ | d35884236461 | stdlib | 1.16.12 | 1 |