Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Aug 13, 2019 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-devel-debuginfoUpgrade nodejs | Oct 1, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserver | Oct 23, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade nodeUpgrade node10Upgrade node8 | Aug 21, 2019 | Aug 21, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Oct 14, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade npmUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-devel | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-docs | Oct 1, 2019 | Aug 13, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-gtk3-langUpgrade firefox-libatk-1_0-0Upgrade mozilla-nssUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3-32bitUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-toolsUpgrade nodejs8Upgrade libfirefox-gio-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certsUpgrade nodejs12-develUpgrade nodejs8-docsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade nodejs8-develUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libffi7Upgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade nodejs12Upgrade mozilla-nss-32bitUpgrade npm10Upgrade nodejs10Upgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libcairo2Upgrade firefox-glib2-toolsUpgrade npm8Upgrade firefox-atk-langUpgrade firefox-libffi4Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefoxUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nsprUpgrade firefox-libharfbuzz0Upgrade mozilla-nss-toolsUpgrade firefox-libgtk-3-0Upgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-develUpgrade libsoftokn3-32bitUpgrade npm12Upgrade firefox-gtk3-dataUpgrade libfreebl3Upgrade mozilla-nspr-32bitUpgrade libsoftokn3Upgrade nodejs10-docsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefox-translations-otherUpgrade nodejs10-develUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-multipressUpgrade nodejs12-docs | Sep 11, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro) | Mar 22, 2023 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub