PT-2022-28294 · Unknown · Geohttpserver

Published 2022-01-04 · Updated 2022-01-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Go HTTP server (affected versions not specified)

Description The issue occurs when a Go HTTP server reads from the request body while simultaneously writing a response and the client sends a "Expect: 100-continue" header, causing the server to panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GO-2021-0141

Affected Products

Geohttpserver

References · 5

• https://osv.dev/vulnerability/GO-2021-0141 · Vendor Advisory
• https://go.dev/issue/34902 · Note
• https://go.dev/cl/242598 · Note
• https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ · Note
• https://go.googlesource.com/go/+/fa98f46741f818913a8c11b877520a548715131f · Note