The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-streamUpgrade nginxUpgrade nginx-mod-mailUpgrade nodejs-nodemonUpgrade nginx-filesystemUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginx-all-modulesUpgrade nodejs-packaging | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade nghttp2Upgrade nodejsUpgrade nginx | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libnghttp2Upgrade nghttp2-debuginfoUpgrade libnghttp2-develUpgrade nghttp2 | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade nginxUpgrade nghttp2 | Oct 4, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Centos_linux | — | Upgrade nginx-filesystemUpgrade nginx-mod-streamUpgrade nodejsUpgrade nghttp2-debugsourceUpgrade nginx-mod-http-image-filterUpgrade nodejs-debugsourceUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-perlUpgrade nodejs-docsUpgrade nginx-debuginfoUpgrade nodejs-devel-debuginfoUpgrade nodejs-packagingUpgrade nginx-mod-mail-debuginfoUpgrade nodejs-nodemonUpgrade libnghttp2Upgrade nginxUpgrade libnghttp2-debuginfoUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nodejs-develUpgrade npmUpgrade nodejs-debuginfoUpgrade nginx-mod-mailUpgrade nginx-mod-stream-debuginfoUpgrade nginx-all-modulesUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nghttp2-debuginfoUpgrade nginx-debugsourceUpgrade nginx-mod-http-perl-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade nodejsUpgrade nginxUpgrade nghttp2 | Aug 26, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade nginxUpgrade nginx-develUpgrade nghttp2Upgrade nodeUpgrade libnghttp2Upgrade node10Upgrade node8 | Aug 21, 2019 | Aug 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nginx | Nov 3, 2020 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nginx | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-perlUpgrade nginx-mod-http-image-filterUpgrade nginx-mod-streamUpgrade nginx-filesystemUpgrade nginx-all-modulesUpgrade nginx-mod-mailUpgrade nginx | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Oct 14, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508) | Aug 13, 2019 | Aug 13, 2019 |
| Nginx | — | Upgrade to nginx version 1.17.3Upgrade to nginx version 1.16.1 | Aug 14, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade library/nghttp2 to version 1.39.2-11.4.14.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade nginx-mod-streamUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-image-filterUpgrade nodejsUpgrade libnghttp2Upgrade nodejs-develUpgrade nodejs-nodemonUpgrade libnghttp2-develUpgrade nginx-mod-mailUpgrade nginx-filesystemUpgrade nginxUpgrade npmUpgrade nginx-all-modulesUpgrade nginx-mod-http-perlUpgrade nghttp2 | Jul 21, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejs-devel-debuginfoUpgrade nginx-mod-http-xslt-filterUpgrade nginx-debuginfoUpgrade npmUpgrade nginx-mod-http-perl-debuginfoUpgrade libnghttp2-debuginfoUpgrade libnghttp2-develUpgrade nghttp2-debuginfoUpgrade nginx-mod-stream-debuginfoUpgrade nodejs-docsUpgrade nodejs-develUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-streamUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade libnghttp2Upgrade nginx-mod-mail-debuginfoUpgrade nghttp2Upgrade nodejs-debuginfoUpgrade nginx-mod-http-perlUpgrade nginx-debugsourceUpgrade nodejs-debugsourceUpgrade nginx-mod-http-image-filterUpgrade nodejs-nodemonUpgrade nginx-mod-mailUpgrade nginxUpgrade nginx-all-modulesUpgrade nodejs-packagingUpgrade nghttp2-debugsourceUpgrade nodejsUpgrade nginx-filesystem | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade nginx-mod-http-perlUpgrade nginx-mod-mailUpgrade nginx-mod-http-xslt-filterUpgrade nginx-mod-http-image-filterUpgrade nginx-debugsourceUpgrade nginx-mod-http-image-filter-debuginfoUpgrade nginx-mod-streamUpgrade nginx-mod-http-xslt-filter-debuginfoUpgrade nginx-debuginfoUpgrade nginx-mod-stream-debuginfoUpgrade nginxUpgrade nginx-mod-mail-debuginfoUpgrade nginx-mod-http-perl-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-libffi7Upgrade python3-nghttp2Upgrade libnghttp2_asio-develUpgrade libnghttp2-14Upgrade MozillaFirefox-translations-commonUpgrade libfirefox-gobject-2_0-0Upgrade nginxUpgrade npm8Upgrade firefox-atk-langUpgrade nginx-sourceUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-ximUpgrade mozilla-nssUpgrade mozilla-nsprUpgrade nghttp2Upgrade libfreebl3Upgrade libnghttp2-develUpgrade npm10Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libnghttp2-14-32bitUpgrade vim-plugin-nginxUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi4Upgrade libnghttp2_asio1Upgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-thaiUpgrade libfirefox-glib-2_0-0Upgrade firefox-libcairo-gobject2Upgrade npm12Upgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libatk-1_0-0Upgrade nodejs8Upgrade mozilla-nss-develUpgrade nodejs10-develUpgrade nodejs8-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade nodejs10Upgrade libfirefox-gio-2_0-0Upgrade firefox-libpango-1_0-0Upgrade libsoftokn3-32bitUpgrade firefox-libharfbuzz0Upgrade nodejs12-docsUpgrade nodejs12Upgrade libnghttp2_asio1-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade nodejs10-docsUpgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade MozillaFirefoxUpgrade nodejs8-docsUpgrade firefox-gtk3-immodule-amharicUpgrade nodejs12-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-certsUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-multipressUpgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-data | Sep 11, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade nginx-lightUpgrade nghttp2-client (Ubuntu Pro)Upgrade nghttp2 (Ubuntu Pro)Upgrade nghttp2-server (Ubuntu Pro)Upgrade libnghttp2-14Upgrade nginx-extrasUpgrade nghttp2Upgrade libnghttp2-14 (Ubuntu Pro)Upgrade nghttp2-proxy (Ubuntu Pro)Upgrade nghttp2-serverUpgrade nghttp2-proxyUpgrade nghttp2-clientUpgrade nginx-coreUpgrade nginx-fullUpgrade nginx-common | Aug 16, 2019 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub