Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade runcUpgrade skopeoUpgrade oci-systemd-hookUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade containerdUpgrade k3sUpgrade goUpgrade py3-twistedUpgrade h2oUpgrade nodejs | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade nodejs-debuginfoUpgrade toolboxUpgrade podmanUpgrade golang-raceUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-systemd-hookUpgrade skopeoUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade npmUpgrade buildah-debugsourceUpgrade containers-commonUpgrade oci-umount-debugsourceUpgrade golang-srcUpgrade nodejs-nodemonUpgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade oci-umountUpgrade runcUpgrade podman-testsUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade golang-miscUpgrade buildah-testsUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-debugsourceUpgrade go-toolsetUpgrade nodejs-devel-debuginfoUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade python-podman-apiUpgrade buildah-tests-debuginfoUpgrade golang-docsUpgrade nodejs-packagingUpgrade runc-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade podman-manpagesUpgrade nodejs-docsUpgrade golang-testsUpgrade golang-binUpgrade fuse-overlayfsUpgrade golangUpgrade podman-docker | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade rust-h2Upgrade nodejsUpgrade h2o | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade h2oUpgrade node10Upgrade h2o-develUpgrade py27-twistedUpgrade py38-twistedUpgrade nodeUpgrade traefikUpgrade node8Upgrade py35-twistedUpgrade py36-twistedUpgrade py37-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade cockpit-podmanUpgrade golangUpgrade podman-manpagesUpgrade nodejs-develUpgrade buildahUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade nodejs-packagingUpgrade golang-miscUpgrade nodejsUpgrade buildah-testsUpgrade oci-systemd-hookUpgrade golang-srcUpgrade go-toolsetUpgrade podman-remoteUpgrade podman-dockerUpgrade container-selinuxUpgrade npmUpgrade oci-umountUpgrade nodejs-nodemonUpgrade golang-raceUpgrade golang-docsUpgrade golang-testsUpgrade podman-testsUpgrade podmanUpgrade golang-binUpgrade containers-commonUpgrade nodejs-docsUpgrade skopeo-testsUpgrade runcUpgrade containernetworking-pluginsUpgrade skopeo | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade cri-oUpgrade atomic-openshift-deschedulerUpgrade openshift-external-storageUpgrade ansible-service-brokerUpgrade ignitionUpgrade golang-github-prometheus-promuUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshift-service-idlerUpgrade cockpitUpgrade atomic-enterprise-service-catalogUpgrade apbUpgrade atomic-openshift-dockerregistryUpgrade csi-livenessprobeUpgrade atomic-openshiftUpgrade heapsterUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-cluster-autoscalerUpgrade pivotUpgrade csi-driver-registrarUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade openshiftUpgrade cri-toolsUpgrade golang-github-prometheus-alertmanagerUpgrade hawkular-openshift-agentUpgrade atomic-openshift-metrics-serverUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-enterprise-image-registryUpgrade atomic-openshift-web-consoleUpgrade openshift-enterprise-autohealUpgrade ansible-operatorUpgrade openshift-monitor-project-lifecycleUpgrade csi-attacherUpgrade openshift-eventrouterUpgrade atomic-openshift-node-problem-detectorUpgrade containernetworking-pluginsUpgrade faqUpgrade golang-github-prometheus-prometheusUpgrade openvswitch-ovn-kubernetesUpgrade image-inspectorUpgrade csi-provisioner | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade buildah-debuginfoUpgrade buildah-testsUpgrade oci-umountUpgrade buildahUpgrade nodejs-packagingUpgrade slirp4netnsUpgrade nodejsUpgrade podman-manpagesUpgrade podman-remoteUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade golang-binUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade oci-systemd-hook-debuginfoUpgrade nodejs-docsUpgrade golang-miscUpgrade nodejs-devel-debuginfoUpgrade podmanUpgrade skopeoUpgrade golangUpgrade podman-dockerUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade fuse-overlayfsUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade slirp4netns-debugsourceUpgrade nodejs-nodemonUpgrade oci-umount-debuginfoUpgrade nodejs-develUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade golang-raceUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade containers-commonUpgrade npmUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hookUpgrade golang-srcUpgrade oci-umount-debugsourceUpgrade go-toolsetUpgrade slirp4netns-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade containernetworking-pluginsUpgrade containers-commonUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade fuse-overlayfsUpgrade oci-umountUpgrade skopeo-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade runc | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-glib2-toolsUpgrade npm8Upgrade libsoftokn3-32bitUpgrade firefox-libpango-1_0-0Upgrade nodejs12-develUpgrade MozillaFirefox-translations-commonUpgrade npm10Upgrade nodejs10-develUpgrade nodejs8-docsUpgrade libsoftokn3Upgrade firefox-atk-langUpgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-langUpgrade nodejs10-docsUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade firefox-libffi4Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-dataUpgrade libfreebl3-32bitUpgrade mozilla-nss-certs-32bitUpgrade nodejs8-develUpgrade mozilla-nspr-develUpgrade go1.12Upgrade firefox-libcairo2Upgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefoxUpgrade firefox-libcairo-gobject2Upgrade nodejs12Upgrade firefox-libatk-1_0-0Upgrade go1.11-docUpgrade firefox-glib2-langUpgrade libfirefox-gobject-2_0-0Upgrade go1.11Upgrade firefox-libffi7Upgrade firefox-gtk3-immodules-tigrignaUpgrade libfreebl3Upgrade npm12Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-inuktitutUpgrade go1.11-raceUpgrade go1.12-raceUpgrade nodejs12-docsUpgrade nodejs8Upgrade mozilla-nss-32bitUpgrade go1.12-docUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-thaiUpgrade nodejs10Upgrade mozilla-nssUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-develUpgrade firefox-gtk3-toolsUpgrade python3-twistedUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nsprUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libgtk-3-0Upgrade mozilla-nss-certs | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade python-twistedUpgrade python3-twistedUpgrade python3-twisted-binUpgrade python-twisted-binUpgrade python-twisted-web | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub