When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade golang-binUpgrade golang-shared | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-oUpgrade openshiftUpgrade microshift | Sep 30, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade golang-docsUpgrade podman-debuginfoUpgrade go-toolsetUpgrade python3.12-django-ansible-base+rbacUpgrade delveUpgrade runcUpgrade automation-gateway-configUpgrade python3-sqlparseUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade image-builder-debuginfoUpgrade rhc-debuginfoUpgrade automation-eda-controller-baseUpgrade automation-eda-controllerUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-tests-debuginfoUpgrade python3.12-gitpythonUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade python3.12-django-ansible-baseUpgrade python3.12-django-ansible-base+rest_filtersUpgrade golang-binUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade flightctl-servicesUpgrade osbuild-composer-workerUpgrade podman-testsUpgrade python3.12-django-ansible-base+authenticationUpgrade go-fdo-server-debuginfoUpgrade grafanaUpgrade python3-criuUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade python3.12-galaxy-ngUpgrade libslirp-debugsourceUpgrade python3.12-django-ansible-base+feature_flagsUpgrade slirp4netnsUpgrade automation-eda-controller-worker-servicesUpgrade flightctl-selinuxUpgrade criu-develUpgrade podman-pluginsUpgrade osbuild-composer-debugsourceUpgrade automation-platform-uiUpgrade conmon-debuginfoUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade ignition-validateUpgrade grafana-debugsourceUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade critUpgrade receptor-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade flightctl-agentUpgrade python3.12-django-ansible-base+channel_authUpgrade udicaUpgrade rhcUpgrade receptorUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade aap-metrics-utilityUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade podman-plugins-debuginfoUpgrade go-fdo-serverUpgrade flightctl-observabilityUpgrade ipp-usb-debuginfoUpgrade automation-gateway-proxy-serverUpgrade go-fdo-server-debugsourceUpgrade go-fdo-server-rendezvousUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade osbuild-composerUpgrade opentelemetry-collectorUpgrade slirp4netns-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade ignition-debugsourceUpgrade automation-gateway-serverUpgrade receptor-debugsourceUpgrade toolbox-debugsourceUpgrade libslirpUpgrade python3.12-sqlparseUpgrade automation-controller-venv-towerUpgrade ignition-validate-debuginfoUpgrade delve-debugsourceUpgrade podman-dockerUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade automation-gateway-proxy-debugsourceUpgrade osbuild-composer-coreUpgrade runc-debugsourceNo solution existsUpgrade grafana-pcp-debugsourceUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade automation-eda-controller-event-stream-servicesUpgrade buildahUpgrade fuse-overlayfsUpgrade automation-gateway-proxy-server-debuginfoUpgrade automation-controllerUpgrade skopeoUpgrade golangUpgrade golang-srcUpgrade automation-hubUpgrade python3.12-django-ansible-base+api_documentationUpgrade osbuild-composer-debuginfoUpgrade cockpit-podmanUpgrade automation-controller-uiUpgrade toolboxUpgrade rhc-debugsourceUpgrade podman-catatonitUpgrade ignition-grubUpgrade golang-raceUpgrade python3.12-django-ansible-base+resource_registryUpgrade criu-debugsourceUpgrade ignition-edgeUpgrade fuse-overlayfs-debuginfoUpgrade automation-eda-controller-base-servicesUpgrade python3-podmanUpgrade criu-debuginfoUpgrade buildah-testsUpgrade ignitionUpgrade toolbox-testsUpgrade go-fdo-server-ownerUpgrade rhc-worker-playbookUpgrade image-builder-debugsourceUpgrade containers-commonUpgrade netavarkUpgrade criu-libsUpgrade crun-debugsourceUpgrade rhc-worker-playbook-debuginfoUpgrade podman-gvproxyUpgrade receptorctlUpgrade image-builderUpgrade skopeo-debugsourceUpgrade criuUpgrade podmanUpgrade automation-controller-serverUpgrade aardvark-dnsUpgrade osbuild-composer-core-debuginfoUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade automation-gateway-proxyUpgrade automation-gatewayUpgrade python3.12-django-ansible-base+activitystreamUpgrade osbuild-composer-tests-debuginfoUpgrade ipp-usbUpgrade grafana-debuginfoUpgrade golang-testsUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade flightctl-cliUpgrade go-fdo-server-manufacturerUpgrade oci-seccomp-bpf-hookUpgrade ignition-debuginfoUpgrade grafana-selinuxUpgrade automation-controller-cliUpgrade python3.12-django-ansible-base+redis_clientUpgrade rhc-worker-playbook-debugsource | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade criu-develUpgrade toolbox-debuginfoUpgrade osbuild-composer-workerUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-debuginfoUpgrade crun-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade golang-binUpgrade go-toolsetUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-gvproxyUpgrade osbuild-composer-debuginfoUpgrade runcUpgrade podman-debugsourceUpgrade delveUpgrade grafana-debugsourceUpgrade ipp-usb-debuginfoUpgrade opentelemetry-collectorUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade crunUpgrade go-fdo-serverUpgrade libslirp-debuginfoUpgrade osbuild-composerUpgrade ipp-usbUpgrade runc-debugsourceUpgrade containers-commonUpgrade grafanaUpgrade skopeo-debuginfoUpgrade criu-libsUpgrade toolbox-testsUpgrade podmanUpgrade aardvark-dnsUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade grafana-debuginfoUpgrade conmonUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade criuUpgrade podman-tests-debuginfoUpgrade grafana-pcpUpgrade toolboxUpgrade skopeo-debugsourceUpgrade skopeoUpgrade podman-catatonitUpgrade netavarkUpgrade libslirpUpgrade go-fdo-server-debuginfoUpgrade podman-testsUpgrade buildah-testsUpgrade grafana-selinuxUpgrade golang-raceUpgrade go-fdo-server-debugsourceUpgrade image-builder-debugsourceUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade image-builder-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade osbuild-composer-coreUpgrade image-builderUpgrade grafana-pcp-debugsourceUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfo | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub