Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade fuse-overlayfsUpgrade oci-umountUpgrade containers-commonUpgrade skopeoUpgrade nodejs-packagingUpgrade containernetworking-pluginsUpgrade runcUpgrade oci-systemd-hook | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade h2oUpgrade goUpgrade nodejsUpgrade py3-twistedUpgrade k3sUpgrade containerd | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade buildah-tests-debuginfoUpgrade runcUpgrade nodejs-debugsourceUpgrade runc-debugsourceUpgrade skopeoUpgrade golangUpgrade nodejs-devel-debuginfoUpgrade slirp4netnsUpgrade oci-systemd-hook-debuginfoUpgrade golang-binUpgrade toolboxUpgrade podman-testsUpgrade golang-srcUpgrade nodejsUpgrade golang-raceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golang-docsUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade podman-remoteUpgrade golang-testsUpgrade oci-umount-debuginfoUpgrade nodejs-debuginfoUpgrade podman-debuginfoUpgrade oci-umount-debugsourceUpgrade slirp4netns-debugsourceUpgrade nodejs-develUpgrade skopeo-testsUpgrade python-podman-apiUpgrade oci-systemd-hookUpgrade npmUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade containers-commonUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade nodejs-nodemonUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade go-toolsetUpgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade podman-manpagesUpgrade buildahUpgrade nodejs-packagingUpgrade podman | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade trafficserver | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py35-twistedUpgrade py38-twistedUpgrade traefikUpgrade h2oUpgrade py27-twistedUpgrade node10Upgrade h2o-develUpgrade node8Upgrade nodeUpgrade py36-twistedUpgrade py37-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade npmUpgrade oci-systemd-hookUpgrade skopeo-testsUpgrade containers-commonUpgrade nodejs-docsUpgrade python-podman-apiUpgrade kubeletUpgrade podman-testsUpgrade buildah-testsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade golang-docsUpgrade go-toolsetUpgrade container-selinuxUpgrade kubeadm-upgradeUpgrade nodejs-develUpgrade slirp4netnsUpgrade kubeadm-ha-setupUpgrade nodejs-packagingUpgrade podman-manpagesUpgrade podmanUpgrade kubectlUpgrade golang-srcUpgrade golang-raceUpgrade oci-umountUpgrade nodejsUpgrade golangUpgrade golang-binUpgrade buildahUpgrade fuse-overlayfsUpgrade runcUpgrade nodejs-nodemonUpgrade kubeadmUpgrade podman-remoteUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade golang-miscUpgrade skopeo | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade golang-github-openshift-prometheus-alert-bufferUpgrade golang-github-prometheus-alertmanagerUpgrade containernetworking-pluginsUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-openshiftUpgrade openshift-enterprise-image-registryUpgrade apbUpgrade hawkular-openshift-agentUpgrade openvswitch-ovn-kubernetesUpgrade atomic-openshift-metrics-serverUpgrade cockpitUpgrade openshift-enterprise-cluster-capacityUpgrade openshift-monitor-project-lifecycleUpgrade golang-github-prometheus-promuUpgrade atomic-openshift-dockerregistryUpgrade heapsterUpgrade atomic-openshift-service-idlerUpgrade csi-provisionerUpgrade openshiftUpgrade openshift-external-storageUpgrade cri-toolsUpgrade openshift-enterprise-autohealUpgrade golang-github-prometheus-node_exporterUpgrade csi-livenessprobeUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-deschedulerUpgrade faqUpgrade atomic-openshift-web-consoleUpgrade atomic-openshift-node-problem-detectorUpgrade openshift-eventrouterUpgrade ansible-service-brokerUpgrade ignitionUpgrade pivotUpgrade cri-oUpgrade atomic-enterprise-service-catalogUpgrade ansible-operatorUpgrade golang-github-prometheus-prometheusUpgrade csi-driver-registrarUpgrade image-inspectorUpgrade csi-attacher | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade oci-systemd-hookUpgrade golangUpgrade buildahUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade nodejs-packagingUpgrade nodejs-develUpgrade runcUpgrade slirp4netnsUpgrade golang-miscUpgrade buildah-testsUpgrade oci-umount-debuginfoUpgrade nodejs-debuginfoUpgrade podman-debuginfoUpgrade python-podman-apiUpgrade oci-systemd-hook-debugsourceUpgrade fuse-overlayfsUpgrade oci-umount-debugsourceUpgrade nodejs-devel-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade podman-manpagesUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade golang-srcUpgrade nodejsUpgrade oci-systemd-hook-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade oci-umountUpgrade podman-debugsourceUpgrade nodejs-docsUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade golang-binUpgrade golang-docsUpgrade slirp4netns-debugsourceUpgrade npmUpgrade containers-commonUpgrade nodejs-nodemonUpgrade containernetworking-plugins-debuginfoUpgrade golang-raceUpgrade toolboxUpgrade golang-testsUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade nodejs-debugsourceUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade skopeo | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-umount-debuginfoUpgrade runc-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfsUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade runcUpgrade runc-debuginfoUpgrade oci-umountUpgrade containernetworking-plugins-debugsource | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-gtk3-immodule-vietnameseUpgrade libfreebl3-32bitUpgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade nodejs10Upgrade firefox-gtk3-immodule-ximUpgrade nodejs8-develUpgrade mozilla-nss-certsUpgrade nodejs8-docsUpgrade libfirefox-gio-2_0-0Upgrade MozillaFirefoxUpgrade npm10Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade go1.11Upgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libcairo-gobject2Upgrade firefox-atk-langUpgrade firefox-gtk3-langUpgrade firefox-libffi7Upgrade npm8Upgrade firefox-gtk3-immodule-amharicUpgrade nodejs12-develUpgrade mozilla-nss-32bitUpgrade nodejs12Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-libpango-1_0-0Upgrade go1.12-docUpgrade firefox-gtk3-toolsUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-certs-32bitUpgrade nodejs8Upgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gobject-2_0-0Upgrade firefox-libffi4Upgrade mozilla-nssUpgrade nodejs12-docsUpgrade nodejs10-develUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade libsoftokn3-32bitUpgrade firefox-glib2-langUpgrade mozilla-nspr-develUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs10-docsUpgrade libsoftokn3Upgrade python3-twistedUpgrade mozilla-nss-toolsUpgrade go1.12-raceUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-thaiUpgrade go1.11-raceUpgrade mozilla-nss-develUpgrade libfreebl3Upgrade firefox-gtk3-dataUpgrade go1.11-docUpgrade mozilla-nsprUpgrade npm12Upgrade firefox-gtk3-immodule-multipressUpgrade go1.12Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-common | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twisted-webUpgrade python3-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python-twistedUpgrade python-twisted-binUpgrade python3-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub