Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade runcUpgrade nodejs-packagingUpgrade skopeoUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade oci-systemd-hookUpgrade oci-umountUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade containerdUpgrade k3sUpgrade py3-twistedUpgrade goUpgrade h2oUpgrade nodejs | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang-binUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade toolboxUpgrade podman-debugsourceUpgrade oci-systemd-hookUpgrade containernetworking-plugins-debugsourceUpgrade podman-debuginfoUpgrade nodejs-debuginfoUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade golang-raceUpgrade nodejs-nodemonUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade oci-umount-debugsourceUpgrade npmUpgrade containers-commonUpgrade podmanUpgrade runc-debuginfoUpgrade oci-umount-debuginfoUpgrade slirp4netns-debugsourceUpgrade nodejsUpgrade golang-binUpgrade golang-miscUpgrade buildah-testsUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade nodejs-packagingUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade buildahUpgrade runcUpgrade podman-testsUpgrade golang-testsUpgrade podman-manpagesUpgrade nodejs-debugsourceUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade nodejs-devel-debuginfoUpgrade nodejs-develUpgrade nodejs-docsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade oci-umountUpgrade python-podman-apiUpgrade golang-docsUpgrade podman-dockerUpgrade golang | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade rust-h2Upgrade h2oUpgrade nodejsUpgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py38-twistedUpgrade h2o-develUpgrade node10Upgrade h2oUpgrade py27-twistedUpgrade node8Upgrade py35-twistedUpgrade py36-twistedUpgrade traefikUpgrade nodeUpgrade py37-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade golangUpgrade podman-manpagesUpgrade nodejsUpgrade fuse-overlayfsUpgrade oci-systemd-hookUpgrade buildahUpgrade podman-remoteUpgrade golang-srcUpgrade nodejs-packagingUpgrade golang-miscUpgrade buildah-testsUpgrade python-podman-apiUpgrade go-toolsetUpgrade nodejs-develUpgrade skopeoUpgrade podman-testsUpgrade containers-commonUpgrade npmUpgrade oci-umountUpgrade container-selinuxUpgrade golang-binUpgrade skopeo-testsUpgrade golang-docsUpgrade nodejs-docsUpgrade golang-raceUpgrade nodejs-nodemonUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade podmanUpgrade runc | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade atomic-openshift-node-problem-detectorUpgrade openshift-monitor-project-lifecycleUpgrade ansible-operatorUpgrade faqUpgrade hawkular-openshift-agentUpgrade golang-github-prometheus-prometheusUpgrade openvswitch-ovn-kubernetesUpgrade openshift-enterprise-image-registryUpgrade containernetworking-pluginsUpgrade csi-attacherUpgrade atomic-openshift-web-consoleUpgrade image-inspectorUpgrade csi-provisionerUpgrade atomic-openshift-metrics-serverUpgrade openshift-enterprise-autohealUpgrade openshift-eventrouterUpgrade golang-github-openshift-oauth-proxyUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-dockerregistryUpgrade openshift-enterprise-cluster-capacityUpgrade openshift-external-storageUpgrade cri-oUpgrade atomic-openshift-service-idlerUpgrade csi-livenessprobeUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade atomic-openshiftUpgrade pivotUpgrade cri-toolsUpgrade openshiftUpgrade atomic-openshift-deschedulerUpgrade csi-driver-registrarUpgrade ignitionUpgrade cockpitUpgrade golang-github-prometheus-promuUpgrade apbUpgrade golang-github-prometheus-node_exporterUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-cluster-autoscalerUpgrade ansible-service-brokerUpgrade heapster | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade podman-debuginfoUpgrade slirp4netnsUpgrade nodejsUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade golangUpgrade golang-docsUpgrade nodejs-devel-debuginfoUpgrade fuse-overlayfsUpgrade nodejs-debugsourceUpgrade podman-dockerUpgrade nodejs-packagingUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade nodejs-docsUpgrade buildah-testsUpgrade python-podman-apiUpgrade toolboxUpgrade skopeoUpgrade runcUpgrade oci-systemd-hook-debuginfoUpgrade golang-miscUpgrade cockpit-podmanUpgrade podmanUpgrade skopeo-debuginfoUpgrade golang-testsUpgrade podman-manpagesUpgrade podman-testsUpgrade podman-remoteUpgrade buildahUpgrade buildah-debuginfoUpgrade golang-binUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade golang-raceUpgrade fuse-overlayfs-debugsourceUpgrade nodejs-develUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade npmUpgrade oci-systemd-hookUpgrade containers-commonUpgrade nodejs-debuginfoUpgrade runc-debuginfoUpgrade golang-srcUpgrade oci-umount-debugsourceUpgrade skopeo-testsUpgrade go-toolsetUpgrade container-selinuxUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade nodejs-nodemonUpgrade buildah-tests-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade skopeo-debuginfoUpgrade runcUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade skopeo-debugsourceUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade skopeoUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade nodejs12-docsUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-32bitUpgrade nodejs8Upgrade libfirefox-gobject-2_0-0Upgrade npm12Upgrade nodejs10Upgrade mozilla-nss-develUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-branding-upstreamUpgrade go1.11-docUpgrade go1.11Upgrade python3-twistedUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nss-certsUpgrade libfreebl3Upgrade go1.12-raceUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libharfbuzz0Upgrade go1.12-docUpgrade firefox-libffi7Upgrade mozillafirefox-branding-sledUpgrade mozilla-nspr-32bitUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-libgtk-3-0Upgrade go1.11-raceUpgrade mozilla-nsprUpgrade mozilla-nssUpgrade nodejs12Upgrade libfirefox-gthread-2_0-0Upgrade npm8Upgrade mozilla-nss-certs-32bitUpgrade mozillafirefox-translations-otherUpgrade libfirefox-glib-2_0-0Upgrade firefox-libcairo2Upgrade libsoftokn3Upgrade firefox-gdk-pixbuf-langUpgrade nodejs10-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libffi4Upgrade firefox-atk-langUpgrade nodejs12-develUpgrade nodejs10-docsUpgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-amharicUpgrade go1.12Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-langUpgrade nodejs8-docsUpgrade libsoftokn3-32bitUpgrade mozillafirefoxUpgrade libfreebl3-32bitUpgrade firefox-libcairo-gobject2Upgrade npm10Upgrade nodejs8-develUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-immodule-ximUpgrade mozilla-nspr-devel | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python3-twisted-binUpgrade python-twisted-webUpgrade python-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python-twistedUpgrade python3-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub