Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade runcUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade skopeoUpgrade oci-systemd-hookUpgrade oci-umountUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade goUpgrade nodejsUpgrade h2oUpgrade containerdUpgrade k3s | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade podmanUpgrade oci-systemd-hookUpgrade container-selinuxUpgrade nodejs-debuginfoUpgrade toolboxUpgrade golang-srcUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade npmUpgrade podman-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade nodejs-nodemonUpgrade golang-raceUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debugsourceUpgrade podman-remote-debuginfoUpgrade oci-umount-debuginfoUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade nodejs-packagingUpgrade podman-dockerUpgrade golang-binUpgrade slirp4netnsUpgrade nodejsUpgrade golang-docsUpgrade python-podman-apiUpgrade nodejs-docsUpgrade nodejs-develUpgrade oci-systemd-hook-debugsourceUpgrade oci-umountUpgrade buildahUpgrade cockpit-podmanUpgrade podman-manpagesUpgrade buildah-debuginfoUpgrade runcUpgrade runc-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade podman-testsUpgrade golang-miscUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade golang-testsUpgrade nodejs-devel-debuginfoUpgrade golangUpgrade nodejs-debugsourceUpgrade skopeo-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade nodejsUpgrade rust-h2Upgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade node10Upgrade py38-twistedUpgrade h2oUpgrade py27-twistedUpgrade h2o-develUpgrade py36-twistedUpgrade node8Upgrade py37-twistedUpgrade nodeUpgrade traefikUpgrade py35-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade golangUpgrade golang-srcUpgrade podman-dockerUpgrade go-toolsetUpgrade buildah-testsUpgrade cockpit-podmanUpgrade oci-systemd-hookUpgrade python-podman-apiUpgrade slirp4netnsUpgrade podman-remoteUpgrade podman-manpagesUpgrade nodejs-packagingUpgrade golang-miscUpgrade fuse-overlayfsUpgrade nodejsUpgrade buildahUpgrade skopeo-testsUpgrade nodejs-docsUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade npmUpgrade nodejs-nodemonUpgrade golang-docsUpgrade oci-umountUpgrade runcUpgrade podmanUpgrade container-selinuxUpgrade podman-testsUpgrade golang-testsUpgrade skopeoUpgrade golang-binUpgrade containers-common | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade apbUpgrade atomic-openshift-deschedulerUpgrade cockpitUpgrade openshiftUpgrade golang-github-prometheus-promuUpgrade golang-github-prometheus-node_exporterUpgrade atomic-enterprise-service-catalogUpgrade openshift-enterprise-cluster-capacityUpgrade openshift-external-storageUpgrade cri-oUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade atomic-openshift-dockerregistryUpgrade golang-github-prometheus-alertmanagerUpgrade csi-driver-registrarUpgrade ignitionUpgrade heapsterUpgrade atomic-openshiftUpgrade ansible-service-brokerUpgrade pivotUpgrade atomic-openshift-cluster-autoscalerUpgrade cri-toolsUpgrade atomic-openshift-service-idlerUpgrade csi-livenessprobeUpgrade atomic-openshift-metrics-serverUpgrade openshift-monitor-project-lifecycleUpgrade containernetworking-pluginsUpgrade image-inspectorUpgrade golang-github-prometheus-prometheusUpgrade openshift-enterprise-autohealUpgrade csi-provisionerUpgrade ansible-operatorUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-enterprise-image-registryUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-openshift-web-consoleUpgrade faqUpgrade hawkular-openshift-agentUpgrade openshift-eventrouterUpgrade csi-attacherUpgrade openvswitch-ovn-kubernetes | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade golang-docsUpgrade oci-systemd-hook-debuginfoUpgrade nodejs-devel-debuginfoUpgrade toolboxUpgrade oci-systemd-hook-debugsourceUpgrade golangUpgrade fuse-overlayfsUpgrade nodejs-docsUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade nodejs-debugsourceUpgrade podman-manpagesUpgrade containernetworking-pluginsUpgrade python-podman-apiUpgrade oci-umountUpgrade nodejs-packagingUpgrade buildah-debuginfoUpgrade nodejsUpgrade golang-testsUpgrade podman-dockerUpgrade golang-binUpgrade skopeo-debugsourceUpgrade skopeoUpgrade golang-miscUpgrade buildahUpgrade podmanUpgrade buildah-testsUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade nodejs-develUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debuginfoUpgrade containers-commonUpgrade nodejs-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-systemd-hookUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade container-selinuxUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade golang-srcUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade nodejs-nodemonUpgrade npm | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade containers-commonUpgrade oci-systemd-hookUpgrade containernetworking-pluginsUpgrade oci-umount-debugsourceUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade runc-debugsourceUpgrade oci-umountUpgrade fuse-overlayfsUpgrade skopeo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade go1.11-raceUpgrade firefox-glib2-langUpgrade firefox-libharfbuzz0Upgrade mozilla-nspr-32bitUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libgtk-3-0Upgrade nodejs10Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gobject-2_0-0Upgrade go1.12-docUpgrade mozilla-nss-32bitUpgrade mozillafirefox-translations-commonUpgrade libfirefox-gmodule-2_0-0Upgrade go1.11Upgrade firefox-libffi7Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-develUpgrade mozilla-nss-certsUpgrade mozilla-nssUpgrade nodejs12-docsUpgrade libfreebl3Upgrade go1.11-docUpgrade nodejs8Upgrade npm12Upgrade mozillafirefox-branding-sledUpgrade firefox-gtk3-immodule-inuktitutUpgrade go1.12-raceUpgrade firefox-gtk3-immodules-tigrignaUpgrade python3-twistedUpgrade nodejs10-develUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-ximUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-toolsUpgrade nodejs8-develUpgrade mozillafirefox-translations-otherUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-glib2-toolsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade libsoftokn3Upgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade npm10Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-dataUpgrade mozillafirefoxUpgrade libfreebl3-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-libffi4Upgrade mozilla-nspr-develUpgrade nodejs10-docsUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-langUpgrade go1.12Upgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs12Upgrade nodejs8-docsUpgrade npm8Upgrade nodejs12-develUpgrade libsoftokn3-32bit | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twisted-binUpgrade python-twisted-webUpgrade python3-twisted-binUpgrade python3-twistedUpgrade libnetty-java (Ubuntu Pro)Upgrade python-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub