Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2022-32149

CVE-2022-32149

HIGH7.5

Denial of service via crafted Accept-Language header in golang.org/x/text/language

Published Oct 14, 2022

Modified 9 months ago

Details

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

References

https://go.dev/cl/442235

https://go.dev/issue/56152

https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ

https://pkg.go.dev/vuln/GO-2022-1059

https://security.netapp.com/advisory/ntap-20230203-0006/

https://www.cve.org/CVERecord?id=CVE-2022-32149

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedOct 14, 2022

ModifiedMay 15, 2025

CVE-2022-32149 | Mondoo Vulnerability Intelligence