The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write (many of) the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade apache2Upgrade nodejs | Aug 22, 2024 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade mod_http2Upgrade mod_http2-debuginfo | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade httpd24 | Oct 26, 2019 | Aug 13, 2019 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Aug 16, 2019 | Aug 13, 2019 |
| Centos_linux | — | Upgrade npmUpgrade mod_proxy_html-debuginfoUpgrade mod_mdUpgrade mod_ldap-debuginfoUpgrade nodejs-nodemonUpgrade mod_ldapUpgrade mod_sessionUpgrade mod_md-debuginfoUpgrade nodejs-debuginfoUpgrade mod_session-debuginfoUpgrade mod_proxy_htmlUpgrade nodejs-docsUpgrade mod_sslUpgrade mod_http2Upgrade nodejs-develUpgrade httpd-filesystemUpgrade nodejs-devel-debuginfoUpgrade mod_http2-debuginfoUpgrade httpd-tools-debuginfoUpgrade httpd-develUpgrade httpd-debugsourceUpgrade mod_ssl-debuginfoUpgrade httpdUpgrade nodejs-debugsourceUpgrade mod_http2-debugsourceUpgrade nodejs-packagingUpgrade nodejsUpgrade httpd-debuginfoUpgrade httpd-toolsUpgrade httpd-manual | Sep 27, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade apache2 | Aug 28, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade node10Upgrade node8Upgrade apache24Upgrade node | Aug 21, 2019 | Aug 21, 2019 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Sep 9, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade httpd-toolsUpgrade httpd-filesystemUpgrade httpd-develUpgrade mod_sessionUpgrade httpdUpgrade mod_sslUpgrade httpd-manual | Feb 26, 2020 | Aug 13, 2019 |
| Ibm Http_server | — | Apply IBM HTTP Server version 9.0.5.1 or later | Nov 5, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Oct 14, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade web/server/apache-24/module/apache-ssl to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-lua to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-gss to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-ssl-fips-140 to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-ldap to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24 to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4Upgrade web/server/apache-24/module/apache-dbd to version 2.4.41-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade mod_mdUpgrade nodejs-packagingUpgrade mod_http2Upgrade mod_sslUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade mod_ldapUpgrade httpd-filesystemUpgrade mod_proxy_htmlUpgrade httpdUpgrade npmUpgrade nodejs-develUpgrade httpd-develUpgrade httpd-manualUpgrade mod_sessionUpgrade httpd-toolsUpgrade nodejs | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade mod_ssl-debuginfoUpgrade nodejsUpgrade httpd-toolsUpgrade mod_mdUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade httpd-manualUpgrade nodejs-devel-debuginfoUpgrade mod_http2-debugsourceUpgrade httpd-debugsourceUpgrade httpd-tools-debuginfoUpgrade httpdUpgrade httpd-develUpgrade mod_http2-debuginfoUpgrade mod_sslUpgrade nodejs-develUpgrade httpd-debuginfoUpgrade mod_http2Upgrade mod_md-debuginfoUpgrade mod_ldapUpgrade npmUpgrade nodejs-nodemonUpgrade mod_ldap-debuginfoUpgrade mod_proxy_htmlUpgrade mod_sessionUpgrade mod_session-debuginfoUpgrade mod_proxy_html-debuginfoUpgrade httpd-filesystemUpgrade nodejs-debuginfo | Sep 25, 2019 | Aug 13, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade nodejs12Upgrade libfreebl3-32bitUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-toolsUpgrade mozilla-nssUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade MozillaFirefoxUpgrade apache2-preforkUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade nodejs12-develUpgrade nodejs8-develUpgrade nodejs8Upgrade mozilla-nss-certs-32bitUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-toolsUpgrade libsoftokn3Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-develUpgrade nodejs10Upgrade firefox-libpango-1_0-0Upgrade apache2-example-pagesUpgrade firefox-gtk3-immodule-ximUpgrade nodejs8-docsUpgrade apache2-develUpgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade libfreebl3Upgrade apache2-docUpgrade apache2-utilsUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libgtk-3-0Upgrade firefox-glib2-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-atk-langUpgrade npm8Upgrade npm10Upgrade mozilla-nsprUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-vietnameseUpgrade apache2-workerUpgrade nodejs10-develUpgrade firefox-libffi4Upgrade npm12Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodules-tigrignaUpgrade nodejs12-docsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-langUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-32bitUpgrade apache2Upgrade firefox-libharfbuzz0Upgrade firefox-libffi7Upgrade mozilla-nspr-develUpgrade nodejs10-docsUpgrade apache2-eventUpgrade libsoftokn3-32bit | Sep 3, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade apache2-binUpgrade apache2 | Aug 30, 2019 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub