Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-systemd-hookUpgrade runcUpgrade fuse-overlayfsUpgrade nodejs-packagingUpgrade oci-umountUpgrade containernetworking-pluginsUpgrade nodejs-nodemonUpgrade skopeoUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade goUpgrade nodejsUpgrade h2oUpgrade k3sUpgrade containerd | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade nodejs-nodemonUpgrade toolboxUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade nodejs-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade npmUpgrade skopeoUpgrade runc-debuginfoUpgrade containers-commonUpgrade golang-srcUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debugsourceUpgrade podmanUpgrade podman-debugsourceUpgrade podman-remoteUpgrade container-selinuxUpgrade python-podman-apiUpgrade runcUpgrade podman-manpagesUpgrade golangUpgrade golang-docsUpgrade podman-dockerUpgrade oci-systemd-hook-debuginfoUpgrade nodejs-packagingUpgrade buildah-tests-debuginfoUpgrade nodejs-debugsourceUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade golang-testsUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade nodejs-develUpgrade golang-miscUpgrade buildahUpgrade oci-umountUpgrade cockpit-podmanUpgrade oci-systemd-hook-debugsourceUpgrade podman-testsUpgrade nodejs-devel-debuginfoUpgrade slirp4netnsUpgrade nodejs-docsUpgrade nodejsUpgrade go-toolsetUpgrade golang-binUpgrade fuse-overlayfsUpgrade skopeo-debugsource | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade rust-h2Upgrade nodejsUpgrade h2oUpgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py27-twistedUpgrade h2o-develUpgrade py38-twistedUpgrade node10Upgrade h2oUpgrade nodeUpgrade traefikUpgrade py35-twistedUpgrade node8Upgrade py36-twistedUpgrade py37-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade golang-raceUpgrade golang-docsUpgrade nodejs-nodemonUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade skopeoUpgrade golang-testsUpgrade skopeo-testsUpgrade npmUpgrade golang-binUpgrade nodejs-docsUpgrade containers-commonUpgrade runcUpgrade container-selinuxUpgrade podmanUpgrade podman-testsUpgrade podman-dockerUpgrade golang-srcUpgrade go-toolsetUpgrade podman-manpagesUpgrade golangUpgrade buildahUpgrade buildah-testsUpgrade nodejsUpgrade nodejs-packagingUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade golang-miscUpgrade python-podman-apiUpgrade oci-systemd-hookUpgrade fuse-overlayfsUpgrade nodejs-develUpgrade podman-remote | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade ansible-service-brokerUpgrade cockpitUpgrade pivotUpgrade cri-toolsUpgrade openshiftUpgrade atomic-openshift-cluster-autoscalerUpgrade csi-livenessprobeUpgrade ignitionUpgrade apbUpgrade golang-github-prometheus-node_exporterUpgrade golang-github-prometheus-promuUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-dockerregistryUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade atomic-openshiftUpgrade openshift-external-storageUpgrade golang-github-prometheus-alertmanagerUpgrade heapsterUpgrade atomic-openshift-service-idlerUpgrade csi-driver-registrarUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-deschedulerUpgrade cri-oUpgrade atomic-openshift-metrics-serverUpgrade openshift-enterprise-image-registryUpgrade golang-github-prometheus-prometheusUpgrade openvswitch-ovn-kubernetesUpgrade openshift-enterprise-autohealUpgrade openshift-monitor-project-lifecycleUpgrade faqUpgrade csi-attacherUpgrade csi-provisionerUpgrade atomic-openshift-node-problem-detectorUpgrade containernetworking-pluginsUpgrade image-inspectorUpgrade openshift-eventrouterUpgrade atomic-openshift-web-consoleUpgrade ansible-operatorUpgrade golang-github-openshift-oauth-proxyUpgrade hawkular-openshift-agent | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade npmUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade oci-systemd-hookUpgrade oci-umount-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade nodejs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debugsourceUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade golang-raceUpgrade container-selinuxUpgrade runc-debuginfoUpgrade golang-srcUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade skopeoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade runcUpgrade python-podman-apiUpgrade skopeo-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade golang-miscUpgrade buildahUpgrade podman-dockerUpgrade buildah-testsUpgrade toolboxUpgrade golangUpgrade golang-docsUpgrade oci-systemd-hook-debuginfoUpgrade nodejs-devel-debuginfoUpgrade podmanUpgrade nodejs-docsUpgrade fuse-overlayfs-debuginfoUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade oci-umountUpgrade containernetworking-pluginsUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade fuse-overlayfsUpgrade golang-testsUpgrade golang-binUpgrade podman-manpagesUpgrade skopeo-debugsourceUpgrade podman-tests | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade oci-umount-debuginfoUpgrade containers-commonUpgrade oci-systemd-hookUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade fuse-overlayfsUpgrade skopeoUpgrade runc | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade nodejs10-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade nodejs8-develUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-langUpgrade go1.12Upgrade nodejs12Upgrade firefox-atk-langUpgrade mozilla-nspr-develUpgrade libfirefox-glib-2_0-0Upgrade npm8Upgrade libsoftokn3-32bitUpgrade firefox-libatk-1_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-langUpgrade nodejs12-develUpgrade firefox-libcairo2Upgrade nodejs8-docsUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefoxUpgrade mozilla-nss-toolsUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-otherUpgrade firefox-glib2-toolsUpgrade libfirefox-gio-2_0-0Upgrade libsoftokn3Upgrade firefox-libffi4Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-certs-32bitUpgrade nodejs10-docsUpgrade firefox-gtk3-immodule-ximUpgrade MozillaFirefox-translations-commonUpgrade npm10Upgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gdk-pixbuf-query-loadersUpgrade npm12Upgrade libfirefox-gobject-2_0-0Upgrade go1.12-docUpgrade nodejs8Upgrade firefox-libharfbuzz0Upgrade mozilla-nssUpgrade nodejs12-docsUpgrade firefox-libffi7Upgrade go1.12-raceUpgrade python3-twistedUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gio-branding-upstreamUpgrade go1.11-docUpgrade nodejs10Upgrade mozilla-nss-develUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-certsUpgrade go1.11Upgrade mozilla-nsprUpgrade firefox-libgtk-3-0Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade go1.11-raceUpgrade firefox-glib2-lang | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twisted-webUpgrade python3-twisted-binUpgrade python-twisted-binUpgrade python-twistedUpgrade python3-twistedUpgrade libnetty-java (Ubuntu Pro) | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub