AZL-107144
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107144.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-107144
- Upstream
- CVE-2026-97032
- Published
- 2026-10-08T23:17:06Z
- Modified
- 2026-10-11T14:17:49Z
- Summary
- CVE-2026-97032 affecting package application-gateway-kubernetes-ingress 1.7.7-6
- Details
-
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server.
- References