Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade fuse-overlayfsUpgrade oci-umountUpgrade nodejs-nodemonUpgrade skopeoUpgrade containernetworking-pluginsUpgrade runcUpgrade nodejs-packagingUpgrade oci-systemd-hook | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade containerdUpgrade k3sUpgrade nodejsUpgrade h2oUpgrade go | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade nodejsUpgrade runcUpgrade nodejs-debugsourceUpgrade runc-debugsourceUpgrade nodejs-devel-debuginfoUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade golang-srcUpgrade golang-binUpgrade oci-systemd-hook-debuginfoUpgrade golang-raceUpgrade nodejs-debuginfoUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade oci-umountUpgrade podman-remoteUpgrade golang-testsUpgrade podman-debuginfoUpgrade nodejs-nodemonUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debuginfoUpgrade go-toolsetUpgrade golang-docsUpgrade nodejs-develUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade npmUpgrade oci-systemd-hookUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade golangUpgrade oci-systemd-hook-debugsourceUpgrade podmanUpgrade nodejs-packaging | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade h2o | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade traefikUpgrade py35-twistedUpgrade py38-twistedUpgrade h2oUpgrade py27-twistedUpgrade h2o-develUpgrade node10Upgrade nodeUpgrade py37-twistedUpgrade node8Upgrade py36-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade kubeletUpgrade containers-commonUpgrade container-selinuxUpgrade kubeadm-ha-setupUpgrade podman-testsUpgrade nodejs-docsUpgrade python-podman-apiUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade go-toolsetUpgrade kubeadm-upgradeUpgrade slirp4netnsUpgrade nodejs-develUpgrade buildah-testsUpgrade golang-docsUpgrade podman-dockerUpgrade npmUpgrade oci-systemd-hookUpgrade oci-umountUpgrade golang-testsUpgrade podmanUpgrade golang-miscUpgrade skopeoUpgrade podman-remoteUpgrade kubeadmUpgrade runcUpgrade nodejs-nodemonUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade nodejs-packagingUpgrade buildahUpgrade podman-manpagesUpgrade kubectlUpgrade golang-srcUpgrade golang-raceUpgrade golangUpgrade nodejsUpgrade golang-bin | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade golang-github-openshift-prometheus-alert-bufferUpgrade csi-provisionerUpgrade atomic-openshiftUpgrade heapsterUpgrade golang-github-prometheus-promuUpgrade hawkular-openshift-agentUpgrade golang-github-prometheus-alertmanagerUpgrade openshift-external-storageUpgrade openshiftUpgrade cockpitUpgrade golang-github-openshift-oauth-proxyUpgrade openvswitch-ovn-kubernetesUpgrade openshift-monitor-project-lifecycleUpgrade atomic-openshift-metrics-serverUpgrade containernetworking-pluginsUpgrade apbUpgrade openshift-enterprise-image-registryUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshift-service-idlerUpgrade openshift-enterprise-cluster-capacityUpgrade ignitionUpgrade cri-oUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-node-problem-detectorUpgrade csi-attacherUpgrade atomic-openshift-web-consoleUpgrade atomic-openshift-deschedulerUpgrade ansible-operatorUpgrade csi-driver-registrarUpgrade pivotUpgrade openshift-eventrouterUpgrade faqUpgrade ansible-service-brokerUpgrade cri-toolsUpgrade golang-github-prometheus-node_exporterUpgrade golang-github-prometheus-prometheusUpgrade csi-livenessprobeUpgrade image-inspector | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade container-selinuxUpgrade golang-docsUpgrade nodejs-docsUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade podmanUpgrade skopeo-testsUpgrade nodejs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade golang-binUpgrade runc-debuginfoUpgrade nodejs-nodemonUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade npmUpgrade podman-debugsourceUpgrade buildahUpgrade nodejsUpgrade oci-systemd-hook-debuginfoUpgrade skopeo-debuginfoUpgrade nodejs-devel-debuginfoUpgrade runc-debugsourceUpgrade oci-umount-debuginfoUpgrade podman-debuginfoUpgrade podman-dockerUpgrade slirp4netnsUpgrade nodejs-packagingUpgrade oci-umount-debugsourceUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade podman-manpagesUpgrade nodejs-develUpgrade runcUpgrade nodejs-debuginfoUpgrade oci-systemd-hookUpgrade fuse-overlayfs-debugsourceUpgrade python-podman-apiUpgrade golangUpgrade cockpit-podmanUpgrade podman-testsUpgrade golang-srcUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade golang-miscUpgrade podman-remote | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade oci-umount-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade oci-systemd-hookUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade runc-debugsourceUpgrade oci-umount-debuginfoUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade containers-commonUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade oci-umountUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade nodejs12-docsUpgrade mozilla-nssUpgrade mozilla-nsprUpgrade go1.11-raceUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade npm12Upgrade go1.12-raceUpgrade go1.11-docUpgrade firefox-libharfbuzz0Upgrade mozilla-nss-develUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-glib2-langUpgrade libsoftokn3Upgrade python3-twistedUpgrade firefox-gtk3-branding-upstreamUpgrade nodejs10-docsUpgrade go1.12Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade libfreebl3Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libatk-1_0-0Upgrade mozilla-nspr-32bitUpgrade firefox-libgtk-3-0Upgrade libsoftokn3-32bitUpgrade nodejs10-develUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade nodejs8Upgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libcairo-gobject2Upgrade nodejs8-docsUpgrade mozilla-nss-certsUpgrade nodejs8-develUpgrade firefox-gdk-pixbuf-langUpgrade npm8Upgrade nodejs12Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade go1.12-docUpgrade libfirefox-gobject-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libffi4Upgrade libfreebl3-32bitUpgrade firefox-glib2-toolsUpgrade go1.11Upgrade firefox-gtk3-immodule-ximUpgrade nodejs10Upgrade libfirefox-gio-2_0-0Upgrade firefox-libcairo2Upgrade nodejs12-develUpgrade firefox-libffi7Upgrade firefox-libpango-1_0-0Upgrade MozillaFirefoxUpgrade npm10 | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python3-twistedUpgrade python-twisted-webUpgrade python-twisted-binUpgrade python3-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub