Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade runcUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade oci-umountUpgrade skopeoUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade oci-systemd-hookUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade nodejsUpgrade h2oUpgrade py3-twistedUpgrade goUpgrade containerdUpgrade k3s | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-bin | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade oci-umount-debuginfoUpgrade golang-srcUpgrade npmUpgrade nodejs-nodemonUpgrade containers-commonUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-testsUpgrade podmanUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hookUpgrade oci-umount-debugsourceUpgrade runc-debuginfoUpgrade nodejs-debuginfoUpgrade golang-raceUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade golang-docsUpgrade golang-testsUpgrade skopeo-debuginfoUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade podman-manpagesUpgrade oci-systemd-hook-debuginfoUpgrade nodejs-devel-debuginfoUpgrade python-podman-apiUpgrade podman-testsUpgrade nodejs-debugsourceUpgrade go-toolsetUpgrade golang-binUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade golangUpgrade skopeo-debugsourceUpgrade runcUpgrade buildahUpgrade buildah-testsUpgrade nodejsUpgrade golang-miscUpgrade oci-systemd-hook-debugsourceUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade oci-umount | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade rust-h2Upgrade nodejsUpgrade h2oUpgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade h2o-develUpgrade py27-twistedUpgrade h2oUpgrade py38-twistedUpgrade node10Upgrade py36-twistedUpgrade node8Upgrade traefikUpgrade py37-twistedUpgrade nodeUpgrade py35-twisted | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade podman-manpagesUpgrade nodejsUpgrade golangUpgrade buildahUpgrade podman-dockerUpgrade golang-miscUpgrade oci-systemd-hookUpgrade slirp4netnsUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade nodejs-develUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade buildah-testsUpgrade nodejs-packagingUpgrade go-toolsetUpgrade golang-srcUpgrade container-selinuxUpgrade skopeoUpgrade golang-binUpgrade podmanUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade npmUpgrade golang-docsUpgrade nodejs-docsUpgrade golang-raceUpgrade nodejs-nodemonUpgrade runcUpgrade containers-commonUpgrade podman-testsUpgrade golang-tests | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade atomic-enterprise-service-catalogUpgrade ansible-service-brokerUpgrade golang-github-prometheus-promuUpgrade csi-livenessprobeUpgrade atomic-openshift-node-problem-detectorUpgrade openshift-monitor-project-lifecycleUpgrade openvswitch-ovn-kubernetesUpgrade ansible-operatorUpgrade openshift-enterprise-autohealUpgrade csi-provisionerUpgrade golang-github-prometheus-prometheusUpgrade openshift-enterprise-image-registryUpgrade openshift-eventrouterUpgrade image-inspectorUpgrade faqUpgrade atomic-openshift-web-consoleUpgrade golang-github-openshift-oauth-proxyUpgrade csi-attacherUpgrade atomic-openshift-metrics-serverUpgrade containernetworking-pluginsUpgrade hawkular-openshift-agentUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-deschedulerUpgrade golang-github-prometheus-alertmanagerUpgrade cockpitUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshiftUpgrade openshiftUpgrade apbUpgrade openshift-external-storageUpgrade heapsterUpgrade ignitionUpgrade golang-github-prometheus-node_exporterUpgrade cri-toolsUpgrade pivotUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade cri-oUpgrade csi-driver-registrarUpgrade atomic-openshift-service-idlerUpgrade atomic-openshift-cluster-autoscaler | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade oci-umount-debugsourceUpgrade containers-commonUpgrade nodejs-develUpgrade containernetworking-plugins-debuginfoUpgrade nodejs-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-systemd-hookUpgrade npmUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debuginfoUpgrade nodejs-nodemonUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade skopeo-testsUpgrade golang-raceUpgrade golang-srcUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade podmanUpgrade containernetworking-pluginsUpgrade nodejs-devel-debuginfoUpgrade fuse-overlayfsUpgrade golangUpgrade cockpit-podmanUpgrade skopeoUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-testsUpgrade golang-testsUpgrade slirp4netnsUpgrade python-podman-apiUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade nodejsUpgrade nodejs-packagingUpgrade oci-umountUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade golang-docsUpgrade podman-debuginfoUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade toolboxUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade podman-manpagesUpgrade golang-binUpgrade buildahUpgrade golang-misc | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade runc-debugsourceUpgrade oci-umountUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debuginfoUpgrade oci-systemd-hookUpgrade containers-commonUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsource | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade npm10Upgrade firefox-gdk-pixbuf-langUpgrade nodejs10-docsUpgrade firefox-libffi4Upgrade nodejs8-develUpgrade nodejs10-develUpgrade libsoftokn3Upgrade libfirefox-gthread-2_0-0Upgrade libfirefox-glib-2_0-0Upgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade firefox-libcairo-gobject2Upgrade go1.12Upgrade nodejs12Upgrade firefox-gtk3-langUpgrade mozilla-nspr-develUpgrade firefox-libatk-1_0-0Upgrade firefox-libcairo2Upgrade mozilla-nss-toolsUpgrade libfirefox-gio-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-ximUpgrade nodejs12-develUpgrade nodejs8-docsUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade npm8Upgrade firefox-libpango-1_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-multipressUpgrade npm12Upgrade libfreebl3Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-32bitUpgrade nodejs8Upgrade firefox-gio-branding-upstreamUpgrade python3-twistedUpgrade nodejs10Upgrade mozilla-nss-develUpgrade go1.11-docUpgrade go1.12-docUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade go1.11Upgrade go1.11-raceUpgrade firefox-glib2-langUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-toolsUpgrade mozilla-nss-certsUpgrade mozilla-nssUpgrade mozillafirefox-translations-commonUpgrade nodejs12-docsUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-thaiUpgrade mozillafirefox-branding-sledUpgrade go1.12-race | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twistedUpgrade python-twisted-webUpgrade python-twisted-binUpgrade python3-twisted-bin | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub