Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade containernetworking-pluginsUpgrade nodejs-packagingUpgrade oci-systemd-hookUpgrade oci-umountUpgrade fuse-overlayfsUpgrade skopeoUpgrade runcUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade containerdUpgrade k3sUpgrade py3-twistedUpgrade h2oUpgrade goUpgrade nodejs | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-bin | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade oci-systemd-hookUpgrade container-selinuxUpgrade nodejs-debuginfoUpgrade oci-umount-debuginfoUpgrade containers-commonUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade runc-debuginfoUpgrade golang-raceUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debugsourceUpgrade npmUpgrade containernetworking-plugins-debuginfoUpgrade nodejs-nodemonUpgrade skopeoUpgrade nodejs-docsUpgrade podman-manpagesUpgrade podman-dockerUpgrade golangUpgrade nodejs-develUpgrade runcUpgrade buildahUpgrade skopeo-debugsourceUpgrade oci-umountUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade python-podman-apiUpgrade golang-docsUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade nodejs-packagingUpgrade runc-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade podman-testsUpgrade golang-testsUpgrade buildah-testsUpgrade nodejsUpgrade golang-miscUpgrade skopeo-debuginfoUpgrade golang-bin | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserverUpgrade h2oUpgrade rust-h2Upgrade nodejs | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py38-twistedUpgrade h2o-develUpgrade h2oUpgrade py27-twistedUpgrade node10Upgrade py36-twistedUpgrade node8Upgrade py37-twistedUpgrade nodeUpgrade py35-twistedUpgrade traefik | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade golang-miscUpgrade podman-remoteUpgrade golang-srcUpgrade podman-dockerUpgrade podman-manpagesUpgrade slirp4netnsUpgrade go-toolsetUpgrade fuse-overlayfsUpgrade python-podman-apiUpgrade buildahUpgrade golangUpgrade nodejs-develUpgrade buildah-testsUpgrade nodejs-packagingUpgrade cockpit-podmanUpgrade oci-systemd-hookUpgrade nodejsUpgrade podmanUpgrade npmUpgrade oci-umountUpgrade container-selinuxUpgrade runcUpgrade nodejs-nodemonUpgrade golang-raceUpgrade golang-docsUpgrade nodejs-docsUpgrade golang-binUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade golang-testsUpgrade podman-testsUpgrade skopeo | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade containernetworking-pluginsUpgrade hawkular-openshift-agentUpgrade golang-github-openshift-oauth-proxyUpgrade openvswitch-ovn-kubernetesUpgrade golang-github-prometheus-prometheusUpgrade openshift-eventrouterUpgrade atomic-openshift-node-problem-detectorUpgrade csi-attacherUpgrade ansible-operatorUpgrade faqUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-web-consoleUpgrade openshift-monitor-project-lifecycleUpgrade csi-provisionerUpgrade image-inspectorUpgrade openshift-enterprise-image-registryUpgrade atomic-openshift-metrics-serverUpgrade atomic-openshift-cluster-autoscalerUpgrade csi-livenessprobeUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade cri-oUpgrade pivotUpgrade openshift-enterprise-cluster-capacityUpgrade golang-github-prometheus-node_exporterUpgrade openshift-external-storageUpgrade golang-github-prometheus-promuUpgrade atomic-openshift-dockerregistryUpgrade heapsterUpgrade ignitionUpgrade atomic-openshift-deschedulerUpgrade csi-driver-registrarUpgrade cockpitUpgrade openshiftUpgrade ansible-service-brokerUpgrade cri-toolsUpgrade atomic-openshiftUpgrade atomic-openshift-service-idlerUpgrade apbUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-enterprise-service-catalog | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejsUpgrade podman-dockerUpgrade buildah-testsUpgrade oci-umountUpgrade golang-docsUpgrade podman-debuginfoUpgrade skopeo-debuginfoUpgrade runcUpgrade golang-testsUpgrade oci-systemd-hook-debuginfoUpgrade golangUpgrade skopeo-debugsourceUpgrade nodejs-devel-debuginfoUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade podmanUpgrade buildah-debuginfoUpgrade golang-miscUpgrade nodejs-docsUpgrade skopeoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade buildahUpgrade toolboxUpgrade golang-binUpgrade oci-systemd-hook-debugsourceUpgrade podman-manpagesUpgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade runc-debugsourceUpgrade containers-commonUpgrade oci-umount-debugsourceUpgrade runc-debuginfoUpgrade golang-raceUpgrade golang-srcUpgrade podman-debugsourceUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hookUpgrade skopeo-testsUpgrade nodejs-nodemonUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade go-toolsetUpgrade nodejs-develUpgrade npmUpgrade fuse-overlayfs-debugsourceUpgrade nodejs-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-debugsource | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade runcUpgrade skopeo-debugsourceUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade oci-umountUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debuginfoUpgrade oci-umount-debugsourceUpgrade containernetworking-pluginsUpgrade oci-systemd-hookUpgrade containers-common | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade go1.12Upgrade nodejs12Upgrade libsoftokn3Upgrade firefox-gtk3-dataUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-langUpgrade firefox-libcairo2Upgrade nodejs10-develUpgrade firefox-glib2-toolsUpgrade firefox-libatk-1_0-0Upgrade nodejs10-docsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-glib-2_0-0Upgrade nodejs8-develUpgrade npm8Upgrade firefox-libcairo-gobject2Upgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozillafirefoxUpgrade nodejs12-develUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-toolsUpgrade firefox-libpango-1_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade nodejs8-docsUpgrade mozillafirefox-translations-otherUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-ximUpgrade firefox-atk-langUpgrade npm10Upgrade firefox-gtk3-branding-upstreamUpgrade go1.12-docUpgrade go1.11Upgrade firefox-glib2-langUpgrade libfirefox-gobject-2_0-0Upgrade go1.11-raceUpgrade npm12Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-toolsUpgrade firefox-gtk3-immodule-inuktitutUpgrade nodejs10Upgrade firefox-gtk3-immodule-multipressUpgrade nodejs8Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade go1.12-raceUpgrade mozillafirefox-branding-sledUpgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nss-develUpgrade go1.11-docUpgrade python3-twistedUpgrade firefox-gio-branding-upstreamUpgrade firefox-libharfbuzz0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nsprUpgrade mozillafirefox-translations-commonUpgrade nodejs12-docsUpgrade mozilla-nss-certsUpgrade firefox-libffi7Upgrade mozilla-nss | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twistedUpgrade python3-twisted-binUpgrade python-twisted-webUpgrade python-twisted-bin | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub