[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhilHUwXmBSwMCjSK_nU2thWzFOJAKyR-fNBoRSrA2sY":3,"g5a-risk:CVE-2023-39325":293},{"success":4,"data":5,"meta":290},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":60,"references":61,"referencesCount":201,"weaknesses":202,"weaknessesCount":211,"isActivelyExploited":212,"cisaInfo":26,"otxData":26,"relatedBlogPosts":213,"seoMetadata":214,"configurations":239,"relatedVendorCves":274,"notableEvents":275},"CVE-2023-39325","What is CVE-2023-39325?","A malicious HTTP\u002F2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP\u002F2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org\u002Fx\u002Fnet\u002Fhttp2 for users manually configuring HTTP\u002F2. The default stream concurrency limit is 250 streams (requests) per HTTP\u002F2 connection. This value may be adjusted using the golang.org\u002Fx\u002Fnet\u002Fhttp2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.","A malicious HTTP\u002F2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number ...","2023-10-11T22:15:09.88","2024-04-28T04:15:09.877",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.03796,[29,29,29,29,29,29,29],"High",[33,38,41,46,49,52,57],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"golang","go","*","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"http2","cpe:2.3:a:golang:http2:*:*:*:*:*:go:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"fedoraproject","fedora","37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":50,"criteria":51,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"netapp","astra_trident","-","cpe:2.3:a:netapp:astra_trident:-:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":55,"criteria":59,"vulnerable":4},"astra_trident_autosupport","cpe:2.3:a:netapp:astra_trident_autosupport:-:*:*:*:*:*:*:*",7,[62,67,70,74,79,85,88,91,94,97,100,103,106,109,112,115,118,121,124,127,130,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,197],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fgo.dev\u002Fcl\u002F534215","Go",[66],"Vendor Advisory",{"url":68,"source":64,"tags":69},"https:\u002F\u002Fgo.dev\u002Fcl\u002F534235",[66],{"url":71,"source":64,"tags":72},"https:\u002F\u002Fgo.dev\u002Fissue\u002F63417",[73,66],"Issue Tracking",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fgroups.google.com\u002Fg\u002Fgolang-announce\u002Fc\u002FiNNxDTCjZvo\u002Fm\u002FUDd7VKQuAAAJ","Google",[78],"Release Notes",{"url":80,"source":81,"tags":82},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O\u002F","Fedoraproject",[83,84],"Mailing List","Third Party Advisory",{"url":86,"source":81,"tags":87},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH\u002F",[83,84],{"url":89,"source":81,"tags":90},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4\u002F",[],{"url":92,"source":81,"tags":93},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2\u002F",[83,84],{"url":95,"source":81,"tags":96},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR\u002F",[83,84],{"url":98,"source":81,"tags":99},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FAVZDNSMVDAQJ64LJC5I5U5LDM5753647\u002F",[83,84],{"url":101,"source":81,"tags":102},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FCHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B\u002F",[83,84],{"url":104,"source":81,"tags":105},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FCLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2\u002F",[83],{"url":107,"source":81,"tags":108},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FD2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L\u002F",[83,84],{"url":110,"source":81,"tags":111},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD\u002F",[83,84],{"url":113,"source":81,"tags":114},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT\u002F",[83,84],{"url":116,"source":81,"tags":117},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7\u002F",[83,84],{"url":119,"source":81,"tags":120},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE\u002F",[83,84],{"url":122,"source":81,"tags":123},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6\u002F",[83,84],{"url":125,"source":81,"tags":126},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKEOTKBUPZXHE3F352JBYNTSNRXYLWD6P\u002F",[83,84],{"url":128,"source":81,"tags":129},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE\u002F",[83],{"url":131,"source":81,"tags":132},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FL5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6\u002F",[],{"url":134,"source":81,"tags":135},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FMZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z\u002F",[83,84],{"url":137,"source":81,"tags":138},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FNG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7\u002F",[83,84],{"url":140,"source":81,"tags":141},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FODBY7RVMGZCBSTWF2OZGIZS57FNFUL67\u002F",[],{"url":143,"source":81,"tags":144},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FOXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q\u002F",[83,84],{"url":146,"source":81,"tags":147},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74\u002F",[],{"url":149,"source":81,"tags":150},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQF5QSYAOPDOWLY6DUHID56Q4HQFYB45I\u002F",[83,84],{"url":152,"source":81,"tags":153},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST\u002F",[],{"url":155,"source":81,"tags":156},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FR3UETKPUB3V5JS5TLZOF3SMTGT5K5APS\u002F",[83,84],{"url":158,"source":81,"tags":159},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FREMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU\u002F",[83,84],{"url":161,"source":81,"tags":162},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FT7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI\u002F",[83,84],{"url":164,"source":81,"tags":165},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ\u002F",[83,84],{"url":167,"source":81,"tags":168},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FUTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP\u002F",[83,84],{"url":170,"source":81,"tags":171},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FW2LZSWTV4NV4SNQARNXG5T6LRHP26EW2\u002F",[],{"url":173,"source":81,"tags":174},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FWCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH\u002F",[83,84],{"url":176,"source":81,"tags":177},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FXFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2\u002F",[83],{"url":179,"source":81,"tags":180},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FXTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY\u002F",[83,84],{"url":182,"source":81,"tags":183},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4\u002F",[],{"url":185,"source":81,"tags":186},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P\u002F",[83,84],{"url":188,"source":81,"tags":189},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV\u002F",[83,84],{"url":191,"source":64,"tags":192},"https:\u002F\u002Fpkg.go.dev\u002Fvuln\u002FGO-2023-2102",[66],{"url":194,"source":195,"tags":196},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202311-09","Gentoo",[83,84],{"url":198,"source":199,"tags":200},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20231110-0008\u002F","Netapp",[84],43,[203],{"id":204,"name":205,"description":206,"extendedDescription":207,"status":208,"abstraction":209,"structure":210},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.","Code frequently has to work with limited resources, so programmers must be careful to ensure that resources are not consumed too quickly, or too easily.  Without use of quotas, resource limits, or other protection mechanisms, it can be easy for an attacker to consume many resources by rapidly making many requests, or causing larger resources to be used than is needed. When too many resources are allocated, or if a single resource is too large, then it can prevent the code from working correctly, possibly leading to a denial of service.","Incomplete","Base","Simple",1,false,[],{"title":215,"metaDescription":216,"keywords":217,"canonicalUrl":218,"structuredData":219},"What is CVE-2023-39325? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-39325, a high severity cyber security vulnerability from 2023. A malicious HTTP\u002F2 client which rapidly creates requests an...","CVE-2023-39325, CVE-2023-39325 vulnerability, CVE-2023-39325 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, golang security, fedoraproject security, netapp security, go vulnerability, http2 vulnerability, fedora vulnerability, astra_trident vulnerability, astra_trident_autosupport vulnerability","\u002Fwhat-is\u002Fcve-2023-39325",{"@context":220,"@type":221,"headline":215,"description":216,"datePublished":10,"dateModified":11,"author":222,"publisher":226,"about":230,"mainEntityOfPage":234,"articleSection":237,"keywords":238},"https:\u002F\u002Fschema.org","TechArticle",{"@type":223,"name":224,"url":225},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":223,"name":224,"url":225,"logo":227},{"@type":228,"url":229},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":231,"name":6,"description":232,"additionalType":233},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":235,"@id":236},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-39325","Cybersecurity","CVE-2023-39325, CVE-2023-39325 vulnerability, CVE-2023-39325 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[240,256,266],{"Operator":26,"Negate":26,"Nodes":241},[242],{"Operator":243,"Negate":26,"CPEMatch":244},"OR",[245,249,253],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":247,"VersionEndExcluding":248,"VersionEndIncluding":26},"99C776A5-1409-4638-AB9A-8A2B053DBFE1","1.20.0","1.20.10",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":250,"VersionStartExcluding":26,"VersionStartIncluding":251,"VersionEndExcluding":252,"VersionEndIncluding":26},"5FD9AB15-E5F6-4DBC-9EC7-D0ABA705802A","1.21.0","1.21.3",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":254,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":255,"VersionEndIncluding":26},"D7D2F801-6F65-4705-BCB9-D057EA54A707","0.17.0",{"Operator":26,"Negate":26,"Nodes":257},[258],{"Operator":243,"Negate":26,"CPEMatch":259},[260,262,264],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":261,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":263,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":265,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Operator":26,"Negate":26,"Nodes":267},[268],{"Operator":243,"Negate":26,"CPEMatch":269},[270,272],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":271,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A4E44A7B-F32A-43F2-B41A-CB3049100DF7",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":273,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"25008095-A75E-4E34-9538-61B6334BB0F9",[],[276,283],{"id":277,"eventType":278,"eventTime":279,"details":280,"label":281,"color":282},"bc3ffeac-6b54-4f7d-a4e5-e9995f994963","LOW_EPSS_DELTA","2025-06-11T10:10:15.651497+00:00","Daily EPSS score decreased by 0.367 on 2023-12-30","EPSS Score Decreased","green",{"id":284,"eventType":285,"eventTime":286,"details":287,"label":288,"color":289},"d8d2a0b0-bfb8-4dd4-b3d8-7eafdaad19a3","HIGH_EPSS_DELTA","2025-11-19T04:05:11.311358+00:00","Daily EPSS score increased by 0.367 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":291,"version":292},1792347473933,"2.0",{"score":294,"band":295,"action":296,"scoredAt":297},42,"Medium","Plan remediation","2026-10-16T06:59:25.796224+00:00"]