Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade skopeoUpgrade oci-umountUpgrade fuse-overlayfsUpgrade containers-commonUpgrade runcUpgrade containernetworking-pluginsUpgrade oci-systemd-hookUpgrade nodejs-packaging | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade k3sUpgrade containerdUpgrade h2oUpgrade goUpgrade nodejs | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade oci-umount-debugsourceUpgrade slirp4netns-debugsourceUpgrade npmUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade nodejs-debuginfoUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade golang-miscUpgrade golangUpgrade podman-remoteUpgrade golang-testsUpgrade buildah-tests-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade podman-testsUpgrade golang-binUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade golang-raceUpgrade nodejs-nodemonUpgrade nodejs-devel-debuginfoUpgrade containernetworking-pluginsUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade podman-manpagesUpgrade podman-dockerUpgrade nodejs-debugsourceUpgrade buildahUpgrade oci-systemd-hook-debugsourceUpgrade runcUpgrade fuse-overlayfsUpgrade nodejs-docsUpgrade cockpit-podmanUpgrade podmanUpgrade toolboxUpgrade buildah-debuginfoUpgrade nodejs-packagingUpgrade golang-srcUpgrade nodejsUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade golang-docsUpgrade nodejs-develUpgrade python-podman-apiUpgrade oci-systemd-hookUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade go-toolsetUpgrade containernetworking-plugins-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade h2o | Sep 3, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade node8Upgrade nodeUpgrade py37-twistedUpgrade py36-twistedUpgrade node10Upgrade py35-twistedUpgrade py27-twistedUpgrade h2o-develUpgrade traefikUpgrade h2oUpgrade py38-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade oci-systemd-hookUpgrade buildah-testsUpgrade npmUpgrade python-podman-apiUpgrade containers-commonUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade kubeletUpgrade podman-dockerUpgrade nodejs-docsUpgrade go-toolsetUpgrade nodejs-develUpgrade slirp4netnsUpgrade kubeadm-ha-setupUpgrade container-selinuxUpgrade kubeadm-upgradeUpgrade golang-docsUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade kubeadmUpgrade golang-testsUpgrade podman-remoteUpgrade nodejs-packagingUpgrade golang-binUpgrade buildahUpgrade golang-miscUpgrade podman-manpagesUpgrade skopeoUpgrade podmanUpgrade kubectlUpgrade golang-srcUpgrade runcUpgrade fuse-overlayfsUpgrade golangUpgrade oci-umountUpgrade nodejs-nodemonUpgrade golang-raceUpgrade nodejs | Oct 10, 2019 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade golang-github-prometheus-promuUpgrade containernetworking-pluginsUpgrade apbUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade openshift-monitor-project-lifecycleUpgrade golang-github-prometheus-alertmanagerUpgrade openvswitch-ovn-kubernetesUpgrade hawkular-openshift-agentUpgrade atomic-openshiftUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshift-service-idlerUpgrade csi-provisionerUpgrade openshiftUpgrade openshift-enterprise-image-registryUpgrade heapsterUpgrade atomic-openshift-metrics-serverUpgrade cockpitUpgrade openshift-external-storageUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-enterprise-cluster-capacityUpgrade csi-attacherUpgrade csi-livenessprobeUpgrade golang-github-prometheus-prometheusUpgrade openshift-enterprise-autohealUpgrade atomic-enterprise-service-catalogUpgrade ansible-service-brokerUpgrade atomic-openshift-node-problem-detectorUpgrade ignitionUpgrade cri-oUpgrade atomic-openshift-web-consoleUpgrade openshift-eventrouterUpgrade golang-github-prometheus-node_exporterUpgrade faqUpgrade pivotUpgrade csi-driver-registrarUpgrade image-inspectorUpgrade atomic-openshift-deschedulerUpgrade ansible-operatorUpgrade atomic-openshift-cluster-autoscalerUpgrade cri-tools | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade oci-systemd-hook-debuginfoUpgrade buildah-debuginfoUpgrade runcUpgrade buildahUpgrade nodejs-devel-debuginfoUpgrade oci-umount-debugsourceUpgrade cockpit-podmanUpgrade go-toolsetUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade golang-srcUpgrade nodejs-debuginfoUpgrade runc-debugsourceUpgrade podman-manpagesUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade oci-systemd-hookUpgrade buildah-testsUpgrade oci-systemd-hook-debugsourceUpgrade nodejs-develUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debuginfoUpgrade podman-dockerUpgrade slirp4netnsUpgrade nodejs-packagingUpgrade golang-miscUpgrade nodejsUpgrade podman-testsUpgrade golangUpgrade python-podman-apiUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade nodejs-nodemonUpgrade containers-commonUpgrade golang-raceUpgrade slirp4netns-debuginfoUpgrade oci-umountUpgrade golang-testsUpgrade golang-binUpgrade runc-debuginfoUpgrade nodejs-docsUpgrade podmanUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade skopeoUpgrade container-selinuxUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade npmUpgrade nodejs-debugsourceUpgrade golang-docsUpgrade fuse-overlayfs-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade runc-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-umount-debugsourceUpgrade oci-systemd-hookUpgrade containers-commonUpgrade oci-umountUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade runc | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-gtk3-dataUpgrade nodejs10-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nspr-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nsprUpgrade libfirefox-gthread-2_0-0Upgrade mozillafirefox-translations-otherUpgrade nodejs10-docsUpgrade mozilla-nssUpgrade nodejs12-docsUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade libsoftokn3Upgrade libsoftokn3-32bitUpgrade mozilla-nss-toolsUpgrade mozilla-nss-develUpgrade go1.11-docUpgrade firefox-libatk-1_0-0Upgrade python3-twistedUpgrade npm12Upgrade go1.12Upgrade libfreebl3Upgrade mozillafirefox-translations-commonUpgrade go1.12-raceUpgrade firefox-libgtk-3-0Upgrade mozillafirefox-branding-sledUpgrade firefox-gtk3-immodule-multipressUpgrade go1.11-raceUpgrade mozilla-nspr-32bitUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade nodejs8Upgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade firefox-libpango-1_0-0Upgrade nodejs12Upgrade mozilla-nss-certs-32bitUpgrade npm8Upgrade nodejs8-develUpgrade firefox-gtk3-toolsUpgrade firefox-gio-branding-upstreamUpgrade firefox-atk-langUpgrade firefox-libffi7Upgrade mozilla-nss-certsUpgrade nodejs12-develUpgrade mozilla-nss-32bitUpgrade firefox-libcairo-gobject2Upgrade nodejs8-docsUpgrade npm10Upgrade go1.11Upgrade firefox-gtk3-immodule-amharicUpgrade go1.12-docUpgrade libfreebl3-32bitUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libcairo2Upgrade mozillafirefoxUpgrade nodejs10Upgrade firefox-glib2-toolsUpgrade libfirefox-gio-2_0-0 | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twisted-webUpgrade python-twisted-binUpgrade python3-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python-twistedUpgrade python3-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub