Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade nodejs-nodemonUpgrade fuse-overlayfsUpgrade skopeoUpgrade oci-umountUpgrade containernetworking-pluginsUpgrade runcUpgrade oci-systemd-hookUpgrade nodejs-packaging | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade k3sUpgrade containerdUpgrade py3-twistedUpgrade nodejsUpgrade goUpgrade h2o | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade runc-debugsourceUpgrade nodejs-debugsourceUpgrade runcUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-dockerUpgrade podman-manpagesUpgrade oci-umountUpgrade nodejs-devel-debuginfoUpgrade golang-raceUpgrade slirp4netnsUpgrade nodejsUpgrade buildahUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade nodejs-nodemonUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade golang-srcUpgrade skopeo-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade python-podman-apiUpgrade golang-docsUpgrade go-toolsetUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade nodejs-debuginfoUpgrade oci-umount-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-systemd-hookUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade npmUpgrade nodejs-develUpgrade skopeo-testsUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsourceUpgrade golang-testsUpgrade podman-remoteUpgrade golang-binUpgrade podman-testsUpgrade buildah-testsUpgrade nodejs-packagingUpgrade oci-systemd-hook-debugsourceUpgrade podmanUpgrade buildah-debuginfoUpgrade golang-misc | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade h2o | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py37-twistedUpgrade nodeUpgrade node8Upgrade py36-twistedUpgrade py27-twistedUpgrade h2oUpgrade node10Upgrade py35-twistedUpgrade traefikUpgrade h2o-develUpgrade py38-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade golang-binUpgrade nodejs-packagingUpgrade buildahUpgrade golang-miscUpgrade podman-remoteUpgrade golang-srcUpgrade golang-testsUpgrade golang-raceUpgrade runcUpgrade golangUpgrade nodejs-nodemonUpgrade fuse-overlayfsUpgrade nodejsUpgrade kubeadmUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-manpagesUpgrade oci-umountUpgrade kubectlUpgrade slirp4netnsUpgrade kubeadm-upgradeUpgrade go-toolsetUpgrade kubeletUpgrade cockpit-podmanUpgrade oci-systemd-hookUpgrade nodejs-develUpgrade npmUpgrade buildah-testsUpgrade kubeadm-ha-setupUpgrade containers-commonUpgrade skopeo-testsUpgrade python-podman-apiUpgrade nodejs-docsUpgrade podman-testsUpgrade podman-dockerUpgrade container-selinuxUpgrade golang-docs | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade cri-oUpgrade csi-driver-registrarUpgrade ansible-service-brokerUpgrade csi-livenessprobeUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-node-problem-detectorUpgrade csi-attacherUpgrade golang-github-prometheus-node_exporterUpgrade ansible-operatorUpgrade image-inspectorUpgrade ignitionUpgrade atomic-openshift-deschedulerUpgrade faqUpgrade openshift-enterprise-autohealUpgrade cri-toolsUpgrade atomic-openshift-web-consoleUpgrade openshift-eventrouterUpgrade pivotUpgrade atomic-openshift-cluster-autoscalerUpgrade golang-github-prometheus-prometheusUpgrade golang-github-openshift-oauth-proxyUpgrade apbUpgrade heapsterUpgrade openshift-enterprise-image-registryUpgrade csi-provisionerUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-metrics-serverUpgrade openshiftUpgrade golang-github-prometheus-promuUpgrade hawkular-openshift-agentUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idlerUpgrade openshift-monitor-project-lifecycleUpgrade atomic-openshiftUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade atomic-openshift-dockerregistryUpgrade openshift-enterprise-cluster-capacityUpgrade openvswitch-ovn-kubernetesUpgrade cockpitUpgrade openshift-external-storage | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade golang-testsUpgrade toolboxUpgrade containers-commonUpgrade nodejs-nodemonUpgrade slirp4netns-debuginfoUpgrade nodejs-debugsourceUpgrade podmanUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade npmUpgrade oci-umountUpgrade golang-binUpgrade containernetworking-plugins-debuginfoUpgrade golang-raceUpgrade golang-docsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade nodejs-docsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade skopeoUpgrade nodejsUpgrade buildah-debuginfoUpgrade oci-umount-debugsourceUpgrade cockpit-podmanUpgrade oci-systemd-hookUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade oci-systemd-hook-debuginfoUpgrade oci-umount-debuginfoUpgrade buildahUpgrade podman-testsUpgrade nodejs-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade python-podman-apiUpgrade runcUpgrade skopeo-debugsourceUpgrade nodejs-packagingUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade golang-miscUpgrade nodejs-devel-debuginfoUpgrade runc-debugsourceUpgrade nodejs-develUpgrade golangUpgrade podman-dockerUpgrade podman-remoteUpgrade go-toolsetUpgrade podman-manpagesUpgrade skopeo-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade oci-umountUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade containers-common | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-libffi4Upgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-toolsUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libcairo2Upgrade libfirefox-gmodule-2_0-0Upgrade libfreebl3-32bitUpgrade nodejs12Upgrade go1.12-docUpgrade firefox-gtk3-immodule-ximUpgrade nodejs8-docsUpgrade firefox-libcairo-gobject2Upgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certsUpgrade nodejs8-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefoxUpgrade libfirefox-glib-2_0-0Upgrade nodejs8Upgrade npm10Upgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-query-loadersUpgrade go1.11Upgrade MozillaFirefox-branding-SLEDUpgrade npm8Upgrade nodejs12-develUpgrade firefox-gtk3-langUpgrade mozilla-nss-32bitUpgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade nodejs10Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libffi7Upgrade mozilla-nss-develUpgrade libfreebl3Upgrade go1.11-docUpgrade mozilla-nssUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade nodejs10-docsUpgrade mozilla-nspr-develUpgrade firefox-glib2-langUpgrade nodejs12-docsUpgrade mozilla-nsprUpgrade libsoftokn3-32bitUpgrade firefox-libatk-1_0-0Upgrade nodejs10-develUpgrade firefox-gtk3-branding-upstreamUpgrade npm12Upgrade libsoftokn3Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-dataUpgrade mozilla-nss-toolsUpgrade python3-twistedUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-otherUpgrade go1.12Upgrade MozillaFirefox-translations-commonUpgrade go1.12-raceUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade go1.11-race | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python3-twistedUpgrade python-twisted-webUpgrade python-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twisted-binUpgrade python-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub