CVE-2022-27664: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Affected products

• Fedoraproject Fedora: version 36 only; version 37 only
• Golang Go: before 1.18.6 (fixed in 1.18.6); version 1.19.0 only

Published 2022-09-06. Last modified 2026-06-17.