1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-267503a090

[FEDORA-2023-267503a090] Fedora 37: git-credential-oauth

Severity Medium
Affected Packages 1
CVEs 1
Info Packages References Vulnerabilities

new upstream version

Package Affected Version
pkg:rpm/fedora/git-credential-oauth?distro=fedora-37 < 0.4.1.1.fc37
ID
FEDORA-2023-267503a090
Severity
medium
Severity from
CVE-2022-41717
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2023-267503a090
Published
2023-02-02T02:17:43
(19 months ago)
Modified
2023-02-02T02:17:43
(19 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2163091 Bug #2163091 - CVE-2022-41717 git-credential-oauth: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2163091
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/git-credential-oauth?distro=fedora-37 fedora git-credential-oauth < 0.4.1.1.fc37 fedora-37
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date