Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-umountUpgrade containers-commonUpgrade nodejs-nodemonUpgrade fuse-overlayfsUpgrade skopeoUpgrade runcUpgrade nodejs-packagingUpgrade containernetworking-pluginsUpgrade oci-systemd-hook | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade k3sUpgrade containerdUpgrade h2oUpgrade goUpgrade nodejs | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade npmUpgrade oci-systemd-hookUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade golang-srcUpgrade nodejs-debuginfoUpgrade podman-dockerUpgrade buildahUpgrade skopeoUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade toolboxUpgrade golang-testsUpgrade podman-remoteUpgrade nodejs-devel-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netnsUpgrade nodejs-docsUpgrade golang-miscUpgrade nodejsUpgrade nodejs-packagingUpgrade containers-commonUpgrade oci-systemd-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade oci-systemd-hook-debuginfoUpgrade golang-binUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade podman-manpagesUpgrade golang-raceUpgrade golangUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade oci-umountUpgrade nodejs-debugsourceUpgrade runc-debugsourceUpgrade runcUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade go-toolsetUpgrade python-podman-apiUpgrade golang-docsUpgrade oci-umount-debugsourceUpgrade podman-debuginfoUpgrade oci-umount-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade nodejs-develUpgrade containernetworking-plugins-debugsource | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade h2o | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py36-twistedUpgrade py37-twistedUpgrade node8Upgrade nodeUpgrade h2oUpgrade py38-twistedUpgrade traefikUpgrade py27-twistedUpgrade node10Upgrade py35-twistedUpgrade h2o-devel | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade oci-systemd-hookUpgrade nodejs-develUpgrade npmUpgrade slirp4netnsUpgrade buildah-testsUpgrade go-toolsetUpgrade kubeadm-upgradeUpgrade kubeletUpgrade golang-docsUpgrade podman-testsUpgrade kubeadm-ha-setupUpgrade podman-dockerUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade container-selinuxUpgrade containers-commonUpgrade skopeo-testsUpgrade nodejs-docsUpgrade fuse-overlayfsUpgrade golang-binUpgrade podman-remoteUpgrade podman-manpagesUpgrade podmanUpgrade kubectlUpgrade golang-testsUpgrade golang-srcUpgrade skopeoUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade runcUpgrade nodejs-nodemonUpgrade kubeadmUpgrade buildahUpgrade nodejs-packagingUpgrade nodejsUpgrade golang-raceUpgrade golangUpgrade oci-umount | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade golang-github-openshift-oauth-proxyUpgrade cockpitUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade atomic-openshift-service-idlerUpgrade hawkular-openshift-agentUpgrade golang-github-prometheus-alertmanagerUpgrade heapsterUpgrade openshift-monitor-project-lifecycleUpgrade atomic-openshift-dockerregistryUpgrade openvswitch-ovn-kubernetesUpgrade golang-github-prometheus-promuUpgrade containernetworking-pluginsUpgrade apbUpgrade csi-provisionerUpgrade atomic-openshiftUpgrade openshift-enterprise-image-registryUpgrade openshift-enterprise-cluster-capacityUpgrade openshift-external-storageUpgrade openshiftUpgrade atomic-openshift-metrics-serverUpgrade csi-attacherUpgrade openshift-eventrouterUpgrade cri-oUpgrade openshift-enterprise-autohealUpgrade golang-github-prometheus-prometheusUpgrade pivotUpgrade ansible-operatorUpgrade atomic-openshift-deschedulerUpgrade csi-livenessprobeUpgrade ignitionUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-web-consoleUpgrade ansible-service-brokerUpgrade golang-github-prometheus-node_exporterUpgrade cri-toolsUpgrade atomic-openshift-node-problem-detectorUpgrade image-inspectorUpgrade csi-driver-registrarUpgrade atomic-openshift-cluster-autoscalerUpgrade faq | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade nodejs-docsUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-docsUpgrade npmUpgrade golang-binUpgrade podman-debugsourceUpgrade skopeoUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade oci-umountUpgrade skopeo-testsUpgrade nodejs-nodemonUpgrade toolboxUpgrade containers-commonUpgrade golang-testsUpgrade nodejs-debugsourceUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade golang-raceUpgrade runcUpgrade nodejs-debuginfoUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade oci-umount-debugsourceUpgrade buildah-testsUpgrade buildahUpgrade skopeo-debuginfoUpgrade oci-systemd-hookUpgrade podman-dockerUpgrade golangUpgrade podman-manpagesUpgrade go-toolsetUpgrade nodejsUpgrade oci-systemd-hook-debuginfoUpgrade oci-umount-debuginfoUpgrade golang-srcUpgrade fuse-overlayfsUpgrade python-podman-apiUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade nodejs-develUpgrade golang-miscUpgrade nodejs-packaging | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade oci-umountUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade skopeoUpgrade oci-systemd-hook-debugsourceUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsource | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade nodejs12-docsUpgrade mozilla-nsprUpgrade go1.11-docUpgrade mozilla-nssUpgrade mozilla-nss-toolsUpgrade nodejs10-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodules-tigrignaUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-translations-otherUpgrade go1.12Upgrade libsoftokn3Upgrade firefox-gtk3-immodule-thaiUpgrade libfreebl3Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade npm12Upgrade mozilla-nspr-develUpgrade firefox-libatk-1_0-0Upgrade python3-twistedUpgrade libfirefox-gthread-2_0-0Upgrade nodejs10-docsUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-multipressUpgrade go1.12-raceUpgrade firefox-libharfbuzz0Upgrade firefox-glib2-langUpgrade mozilla-nss-develUpgrade go1.11-raceUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-certsUpgrade libfirefox-gmodule-2_0-0Upgrade nodejs8-docsUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs8Upgrade go1.12-docUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-langUpgrade libfreebl3-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-glib2-toolsUpgrade nodejs12Upgrade firefox-libffi7Upgrade firefox-atk-langUpgrade nodejs12-develUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade npm10Upgrade go1.11Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaFirefoxUpgrade MozillaFirefox-branding-SLEDUpgrade nodejs8-develUpgrade firefox-libcairo2Upgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade nodejs10Upgrade npm8Upgrade mozilla-nss-certs-32bitUpgrade libfirefox-glib-2_0-0Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-tools | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python3-twisted-binUpgrade python-twisted-webUpgrade python-twisted-binUpgrade python-twistedUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub