GO-2022-0933

vendorUSosv

Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

view advisory published 2024-08-21Licence: per source

Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-39162USmedium5.0—
Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if an H/2 GOAWAY and SETTINGS frame are received in the same IO…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan