Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade oci-umountUpgrade skopeoUpgrade fuse-overlayfsUpgrade nodejs-nodemonUpgrade runcUpgrade oci-systemd-hookUpgrade nodejs-packagingUpgrade containernetworking-plugins | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade k3sUpgrade py3-twistedUpgrade containerdUpgrade h2oUpgrade nodejsUpgrade go | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-src | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade go-toolsetUpgrade podman-debugsourceUpgrade nodejs-nodemonUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hookUpgrade nodejsUpgrade golang-srcUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade toolboxUpgrade buildah-testsUpgrade podman-dockerUpgrade nodejs-packagingUpgrade golang-miscUpgrade podmanUpgrade buildah-debuginfoUpgrade nodejs-docsUpgrade container-selinuxUpgrade skopeoUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade podman-remoteUpgrade golang-binUpgrade oci-systemd-hook-debuginfoUpgrade slirp4netnsUpgrade nodejs-devel-debuginfoUpgrade golangUpgrade golang-testsUpgrade podman-manpagesUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade oci-umountUpgrade runcUpgrade nodejs-debugsourceUpgrade npmUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade nodejs-develUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-umount-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade nodejs-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade trafficserver | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py37-twistedUpgrade py36-twistedUpgrade node8Upgrade nodeUpgrade node10Upgrade py27-twistedUpgrade h2oUpgrade py38-twistedUpgrade py35-twistedUpgrade traefikUpgrade h2o-devel | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade kubeadm-ha-setupUpgrade golang-docsUpgrade podman-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade kubeadm-upgradeUpgrade npmUpgrade container-selinuxUpgrade oci-systemd-hookUpgrade nodejs-develUpgrade go-toolsetUpgrade python-podman-apiUpgrade skopeo-testsUpgrade containers-commonUpgrade nodejs-docsUpgrade slirp4netnsUpgrade kubeletUpgrade buildah-testsUpgrade nodejs-packagingUpgrade nodejsUpgrade golang-binUpgrade nodejs-nodemonUpgrade oci-umountUpgrade containernetworking-pluginsUpgrade kubeadmUpgrade golang-miscUpgrade podmanUpgrade buildahUpgrade podman-manpagesUpgrade podman-remoteUpgrade kubectlUpgrade golang-testsUpgrade golang-srcUpgrade skopeoUpgrade runcUpgrade fuse-overlayfsUpgrade golangUpgrade golang-race | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade cri-oUpgrade atomic-openshift-web-consoleUpgrade image-inspectorUpgrade faqUpgrade atomic-openshift-cluster-autoscalerUpgrade ignitionUpgrade ansible-operatorUpgrade csi-driver-registrarUpgrade csi-attacherUpgrade csi-livenessprobeUpgrade ansible-service-brokerUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-enterprise-service-catalogUpgrade golang-github-prometheus-prometheusUpgrade pivotUpgrade atomic-openshift-deschedulerUpgrade cri-toolsUpgrade openshift-enterprise-autohealUpgrade openshift-eventrouterUpgrade openshiftUpgrade atomic-openshift-dockerregistryUpgrade csi-provisionerUpgrade openvswitch-ovn-kubernetesUpgrade openshift-enterprise-image-registryUpgrade hawkular-openshift-agentUpgrade golang-github-prometheus-promuUpgrade containernetworking-pluginsUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-metrics-serverUpgrade openshift-monitor-project-lifecycleUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-enterprise-cluster-capacityUpgrade apbUpgrade atomic-openshiftUpgrade heapsterUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade atomic-openshift-service-idlerUpgrade openshift-external-storageUpgrade cockpit | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade golang-srcUpgrade python-podman-apiUpgrade oci-systemd-hook-debugsourceUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade podman-manpagesUpgrade nodejsUpgrade podman-dockerUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade oci-systemd-hook-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade nodejs-devel-debuginfoUpgrade skopeo-debugsourceUpgrade nodejs-debuginfoUpgrade podman-testsUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade runcUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade buildahUpgrade nodejs-packagingUpgrade oci-systemd-hookUpgrade slirp4netnsUpgrade oci-umount-debugsourceUpgrade nodejs-develUpgrade skopeo-debuginfoUpgrade oci-umount-debuginfoUpgrade go-toolsetUpgrade golang-miscUpgrade nodejs-docsUpgrade container-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade nodejs-debugsourceUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade npmUpgrade golang-binUpgrade podman-debugsourceUpgrade golang-raceUpgrade containers-commonUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade nodejs-nodemonUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade golang-testsUpgrade golang-docs | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade skopeo-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debugsourceUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hookUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade runcUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade skopeoUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade mozilla-nss-certs-32bitUpgrade firefox-libffi7Upgrade nodejs12-develUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-32bitUpgrade firefox-gio-branding-upstreamUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gobject-2_0-0Upgrade npm8Upgrade nodejs8Upgrade npm10Upgrade nodejs12Upgrade nodejs8-develUpgrade firefox-libpango-1_0-0Upgrade go1.12-docUpgrade firefox-libffi4Upgrade nodejs8-docsUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libcairo-gobject2Upgrade mozilla-nss-certsUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libcairo2Upgrade libfirefox-glib-2_0-0Upgrade firefox-glib2-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gio-2_0-0Upgrade MozillaFirefoxUpgrade libfreebl3-32bitUpgrade go1.11Upgrade nodejs10Upgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-toolsUpgrade libfreebl3Upgrade npm12Upgrade mozilla-nss-develUpgrade go1.11-raceUpgrade firefox-libatk-1_0-0Upgrade nodejs12-docsUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-thaiUpgrade go1.11-docUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade go1.12-raceUpgrade mozilla-nspr-32bitUpgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade MozillaFirefox-translations-otherUpgrade go1.12Upgrade MozillaFirefox-translations-commonUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-glib2-langUpgrade nodejs10-docsUpgrade mozilla-nspr-develUpgrade firefox-gtk3-dataUpgrade nodejs10-develUpgrade python3-twistedUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodules-tigrignaUpgrade libsoftokn3 | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade python-twisted-binUpgrade python3-twisted-binUpgrade python-twistedUpgrade python-twisted-webUpgrade python3-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub