A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade crunUpgrade criuUpgrade podman-pluginsUpgrade netavarkUpgrade criu-develUpgrade podman-dockerUpgrade skopeo-testsUpgrade podmanUpgrade podman-testsUpgrade skopeoUpgrade podman-catatonitUpgrade conmonUpgrade libslirp-develUpgrade udicaUpgrade toolboxUpgrade libslirpUpgrade podman-gvproxyUpgrade python3-podmanUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade criu-libsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade buildah-testsUpgrade critUpgrade runcUpgrade python3-criuUpgrade containers-commonUpgrade container-selinuxUpgrade buildahUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade toolbox-tests | Nov 16, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade podmanUpgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade cni-plugins-debuginfoUpgrade dockerUpgrade golangUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-miscUpgrade amazon-ssm-agent-debuginfoUpgrade rcloneUpgrade docker-debuginfoUpgrade golang-raceUpgrade cri-toolsUpgrade golang-srcUpgrade golang-sharedUpgrade containerd-stressUpgrade containerdUpgrade cri-tools-debuginfoUpgrade cni-pluginsUpgrade golang-binUpgrade nerdctlUpgrade golang-testsUpgrade golang-docsUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helperUpgrade nerdctl-debuginfoUpgrade rclone-debuginfo | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade dockerUpgrade amazon-ssm-agentUpgrade golangUpgrade containerd | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade amazon-ssm-agentUpgrade golang-miscUpgrade cni-plugins-debugsourceUpgrade golang-srcUpgrade amazon-ecr-credential-helperUpgrade docker-debugsourceUpgrade golang-sharedUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade cni-pluginsUpgrade golang-docsUpgrade golangUpgrade golang-testsUpgrade nerdctlUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade ecs-initUpgrade dockerUpgrade amazon-ssm-agent-debugsource | Feb 17, 2025 | Feb 17, 2023 |
| Centos_linux | — | Upgrade golang-binUpgrade skopeoUpgrade runc-debuginfoUpgrade udicaUpgrade buildah-debugsourceUpgrade delve-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade python3-criuUpgrade podmanUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade containers-commonUpgrade critUpgrade golang-srcUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade rhcUpgrade podman-remote-debuginfoUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade golang-docsUpgrade netavarkUpgrade podman-catatonitUpgrade criuUpgrade crun-debugsourceUpgrade delve-debugsourceUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-debuginfoUpgrade libslirp-develUpgrade criu-libs-debuginfoUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade golang-miscUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade rhc-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade python3-podmanUpgrade golang-raceUpgrade buildahUpgrade rhc-debuginfoUpgrade container-selinuxUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade podman-docker | Oct 25, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19Upgrade golang-golang-x-net | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engineUpgrade docker-engine-selinux | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engineUpgrade docker-engine-selinux | May 31, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Mar 13, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade criuUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade skopeoUpgrade runcUpgrade podmanUpgrade buildah-testsUpgrade python3-podmanUpgrade podman-catatonitUpgrade netavarkUpgrade buildahUpgrade conmonUpgrade udicaUpgrade podman-remoteUpgrade podman-testsUpgrade container-selinuxUpgrade criu-develUpgrade cockpit-podmanUpgrade crunUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade containers-commonUpgrade skopeo-testsUpgrade libslirpUpgrade podman-pluginsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade libslirp-develUpgrade crit | Nov 16, 2023 | Feb 17, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podman | May 19, 2023 | Feb 17, 2023 |
| Redhat_linux | — | Upgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade criuUpgrade toolboxUpgrade golang-testsUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade podmanUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade delve-debugsourceUpgrade rhc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade skopeoUpgrade python3-criuUpgrade aardvark-dnsUpgrade runcUpgrade crunUpgrade podman-dockerUpgrade udicaUpgrade toolbox-debuginfoUpgrade golang-binUpgrade netavarkNo solution existsUpgrade critUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade criu-libsUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade go-toolsetUpgrade golangUpgrade cockpit-podmanUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade delveUpgrade podman-plugins-debuginfoUpgrade rhcUpgrade criu-debuginfoUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeo-testsUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debuginfoUpgrade conmonUpgrade libslirpUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade rhc-debugsourceUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade buildah-testsUpgrade crun-debuginfo | Oct 25, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade runcUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade crunUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade critUpgrade podman-remoteUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade conmonUpgrade slirp4netnsUpgrade containers-commonUpgrade podman-testsUpgrade criu-libsUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade podmanUpgrade libslirp | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade golang-github-lusitaniae-apache_exporterUpgrade firewalld-prometheus-configUpgrade golang-github-prometheus-prometheusUpgrade go1.18-openssl-raceUpgrade go1.19Upgrade go1.20-raceUpgrade golang-github-qubitproducts-exporter_exporterUpgrade go1.18-docUpgrade helmUpgrade supportutils-plugin-susemanager-clientUpgrade dracut-saltbootUpgrade go1.20-docUpgrade go1.18-opensslUpgrade helm-bash-completionUpgrade go1.18-raceUpgrade container-suseconnectUpgrade grafanaUpgrade prometheus-postgres_exporterUpgrade supportutils-plugin-saltUpgrade helm-zsh-completionUpgrade go1.20Upgrade helm-fish-completionUpgrade go1.18-openssl-docUpgrade go1.18Upgrade spacecmdUpgrade prometheus-blackbox_exporterUpgrade golang-github-prometheus-node_exporterUpgrade go1.19-raceUpgrade go1.19-doc | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.17-go | Nov 15, 2024 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub