CVE-2023-39325

CVE-2023-39325 is a denial-of-service vulnerability affecting Go's HTTP/2 server implementation, including fedoraproject and NetApp products. A malicious HTTP/2 client can rapidly create and reset requests, causing excessive resource consumption and potentially leading to server unavailability. This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and high availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.