RHBA-2023:6078 — Red Hat Bug Fix Advisory: MTV 2.5.2 Images
The source describes multiple software flaws associated with the MTV 2.5.2 images. These include denial-of-service conditions in the Golang HPACK decoder, GraphQL query processing, and handling of multiplexed HTTP/2 streams. It also describes security-restriction bypasses in Gin-Gonic Gin related to input validation. Red Hat rated the HTTP/2 Rapid Reset Attack flaw “Important,” and the text states that CISA declared it an active exploit.
CERT24