Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade oci-umountUpgrade nodejs-nodemonUpgrade containers-commonUpgrade skopeoUpgrade nodejs-packagingUpgrade runcUpgrade oci-systemd-hookUpgrade containernetworking-plugins | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade h2oUpgrade nodejsUpgrade goUpgrade k3sUpgrade py3-twistedUpgrade containerd | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golang-misc | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade container-selinuxUpgrade go-toolsetUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade npmUpgrade oci-systemd-hookUpgrade python-podman-apiUpgrade nodejs-debugsourceUpgrade fuse-overlayfsUpgrade golang-testsUpgrade podman-remoteUpgrade golangUpgrade podmanUpgrade podman-testsUpgrade oci-systemd-hook-debuginfoUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade podman-manpagesUpgrade fuse-overlayfs-debugsourceUpgrade runcUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade nodejs-packagingUpgrade golang-miscUpgrade oci-systemd-hook-debugsourceUpgrade golang-raceUpgrade buildah-debuginfoUpgrade golang-srcUpgrade buildahUpgrade podman-dockerUpgrade skopeoUpgrade nodejs-docsUpgrade skopeo-debuginfoUpgrade nodejsUpgrade golang-binUpgrade toolboxUpgrade slirp4netnsUpgrade nodejs-devel-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade nodejs-develUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debuginfoUpgrade skopeo-testsUpgrade golang-docsUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade nodejs-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade trafficserver | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py27-twistedUpgrade py35-twistedUpgrade h2o-develUpgrade traefikUpgrade h2oUpgrade node10Upgrade py38-twistedUpgrade nodeUpgrade py37-twistedUpgrade py36-twistedUpgrade node8 | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade npmUpgrade kubeadm-ha-setupUpgrade buildah-testsUpgrade oci-systemd-hookUpgrade kubeletUpgrade container-selinuxUpgrade golang-docsUpgrade podman-testsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade slirp4netnsUpgrade containers-commonUpgrade nodejs-docsUpgrade python-podman-apiUpgrade go-toolsetUpgrade kubeadm-upgradeUpgrade nodejs-develUpgrade golang-binUpgrade fuse-overlayfsUpgrade buildahUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade kubeadmUpgrade runcUpgrade golang-miscUpgrade skopeoUpgrade podmanUpgrade kubectlUpgrade golang-testsUpgrade podman-manpagesUpgrade podman-remoteUpgrade golang-srcUpgrade nodejsUpgrade golang-raceUpgrade golangUpgrade oci-umountUpgrade containernetworking-plugins | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade csi-attacherUpgrade atomic-openshift-cluster-autoscalerUpgrade cockpitUpgrade atomic-openshift-dockerregistryUpgrade openvswitch-ovn-kubernetesUpgrade openshift-external-storageUpgrade atomic-openshift-metrics-serverUpgrade golang-github-prometheus-promuUpgrade heapsterUpgrade atomic-openshiftUpgrade openshift-enterprise-cluster-capacityUpgrade hawkular-openshift-agentUpgrade openshift-enterprise-image-registryUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade containernetworking-pluginsUpgrade golang-github-openshift-oauth-proxyUpgrade openshiftUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-service-idlerUpgrade csi-provisionerUpgrade openshift-monitor-project-lifecycleUpgrade apbUpgrade csi-livenessprobeUpgrade ansible-service-brokerUpgrade ansible-operatorUpgrade cri-toolsUpgrade atomic-openshift-web-consoleUpgrade csi-driver-registrarUpgrade openshift-eventrouterUpgrade image-inspectorUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-node-problem-detectorUpgrade ignitionUpgrade golang-github-prometheus-prometheusUpgrade golang-github-prometheus-node_exporterUpgrade cri-oUpgrade atomic-enterprise-service-catalogUpgrade faqUpgrade atomic-openshift-deschedulerUpgrade pivot | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade nodejs-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade oci-umountUpgrade toolboxUpgrade podmanUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade golang-docsUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade nodejs-docsUpgrade golang-testsUpgrade npmUpgrade nodejs-nodemonUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade skopeo-debuginfoUpgrade golang-miscUpgrade runc-debugsourceUpgrade oci-umount-debuginfoUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade nodejs-devel-debuginfoUpgrade oci-umount-debugsourceUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade oci-systemd-hook-debuginfoUpgrade buildah-testsUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejsUpgrade podman-remoteUpgrade golang-srcUpgrade podman-manpagesUpgrade buildah-tests-debuginfoUpgrade python-podman-apiUpgrade go-toolsetUpgrade buildahUpgrade podman-testsUpgrade golangUpgrade podman-dockerUpgrade oci-systemd-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runcUpgrade oci-systemd-hook | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade skopeoUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade containers-commonUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade runc-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-debugsource | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade mozilla-nss-toolsUpgrade python3-twistedUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-translations-otherUpgrade mozilla-nsprUpgrade go1.12-raceUpgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade npm12Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nssUpgrade go1.11-raceUpgrade go1.11-docUpgrade firefox-gtk3-immodule-multipressUpgrade libfreebl3Upgrade mozillafirefox-branding-sledUpgrade mozilla-nss-develUpgrade nodejs12-docsUpgrade nodejs10-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-branding-upstreamUpgrade go1.12Upgrade firefox-libatk-1_0-0Upgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade mozillafirefox-translations-commonUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nspr-32bitUpgrade nodejs10-docsUpgrade firefox-glib2-langUpgrade libsoftokn3Upgrade firefox-libcairo2Upgrade nodejs8Upgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gio-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade npm8Upgrade nodejs12-develUpgrade libfreebl3-32bitUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nss-32bitUpgrade mozillafirefoxUpgrade nodejs10Upgrade firefox-glib2-toolsUpgrade firefox-gtk3-immodule-vietnameseUpgrade go1.12-docUpgrade firefox-libffi4Upgrade npm10Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-gmodule-2_0-0Upgrade go1.11Upgrade mozilla-nss-certsUpgrade firefox-libcairo-gobject2Upgrade nodejs8-docsUpgrade nodejs12Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-langUpgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs8-develUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-toolsUpgrade firefox-libffi7Upgrade firefox-atk-langUpgrade firefox-gio-branding-upstream | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python3-twistedUpgrade python-twisted-binUpgrade python-twisted-webUpgrade python3-twisted-binUpgrade python-twistedUpgrade libnetty-java (Ubuntu Pro) | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub