The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade h2oUpgrade py3-twistedUpgrade containerdUpgrade nodejs | Aug 22, 2024 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade nodejs-devel-debuginfoUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemon | Oct 1, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade h2o | Oct 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade h2oUpgrade py38-twistedUpgrade h2o-develUpgrade py27-twistedUpgrade node10Upgrade node8Upgrade py36-twistedUpgrade py37-twistedUpgrade py35-twistedUpgrade node | Apr 21, 2020 | Aug 25, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Oct 14, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-packaging | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade sriov-network-device-plugin | Oct 8, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejsUpgrade npm | Oct 1, 2019 | Aug 13, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade npm12Upgrade firefox-libcairo-gobject2Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade nodejs12-develUpgrade firefox-libffi7Upgrade firefox-gtk3-dataUpgrade nodejs12-docsUpgrade mozilla-nspr-32bitUpgrade MozillaFirefoxUpgrade nodejs8-develUpgrade firefox-gio-branding-upstreamUpgrade nodejs12Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-glib2-langUpgrade nodejs8Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-multipressUpgrade nodejs10-docsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libharfbuzz0Upgrade libfreebl3Upgrade firefox-atk-langUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodules-tigrignaUpgrade nodejs8-docsUpgrade MozillaFirefox-translations-otherUpgrade python3-twistedUpgrade mozilla-nssUpgrade firefox-gtk3-langUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade firefox-libcairo2Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-libgtk-3-0Upgrade firefox-libatk-1_0-0Upgrade firefox-libffi4Upgrade libsoftokn3Upgrade npm10Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade nodejs10-develUpgrade nodejs10Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-toolsUpgrade libfirefox-glib-2_0-0Upgrade npm8Upgrade firefox-glib2-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-tools | Sep 11, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twisted-webUpgrade python-twisted-binUpgrade python3-twisted-binUpgrade python-twistedUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub