When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade rclone-debuginfoUpgrade amazon-ssm-agentUpgrade amazon-cloudwatch-agentUpgrade cni-pluginsUpgrade cni-plugins-debuginfoUpgrade containerd-stressUpgrade nerdctlUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade containerdUpgrade golang-docsUpgrade golist-debuginfoUpgrade docker-debuginfoUpgrade ecs-initUpgrade runcUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade oci-add-hooks-debuginfoUpgrade cri-tools-debuginfoUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade amazon-ecr-credential-helper-debuginfoUpgrade oci-add-hooksUpgrade golang-testsUpgrade runfinch-finchUpgrade dockerUpgrade golistUpgrade golang-srcUpgrade rcloneUpgrade cri-tools | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade runc-debugsourceUpgrade docker-debugsourceUpgrade yq-debuginfoUpgrade rcloneUpgrade golang-srcUpgrade oci-add-hooks-debugsourceUpgrade runcUpgrade dockerUpgrade golang-miscUpgrade golang-testsUpgrade runfinch-finchUpgrade golangUpgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade runc-debuginfoUpgrade golistUpgrade amazon-ecr-credential-helperUpgrade credentials-fetcherUpgrade amazon-ssm-agentUpgrade rclone-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golist-debuginfoUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade containerdUpgrade yqUpgrade containerd-stress-debuginfoUpgrade containerd-stressUpgrade ecs-initUpgrade docker-debuginfoUpgrade oci-add-hooksUpgrade rclone-debugsourceUpgrade golang-docsUpgrade yq-debugsourceUpgrade nerdctlUpgrade golist-debugsource | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade golang-srcUpgrade golangUpgrade go-toolsetUpgrade delveUpgrade golang-misc | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade microshiftUpgrade ose-crio-credential-provider | Aug 27, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade delveUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-misc | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade delveUpgrade golang-raceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade golang | Aug 27, 2026 | Aug 26, 2026 |
| Ubuntu | — | Upgrade containerd (Ubuntu Pro)Upgrade adsysUpgrade golang-github-docker-containerd-dev (Ubuntu Pro)Upgrade containerd-stableUpgrade containerdUpgrade golang-github-containerd-containerd-api-dev (Ubuntu Pro)Upgrade adsys (Ubuntu Pro)Upgrade golang-github-containerd-containerd-devUpgrade golang-github-containerd-containerd-dev (Ubuntu Pro) | Jun 16, 2026 | Jun 15, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub