Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade containernetworking-pluginsUpgrade oci-umountUpgrade oci-systemd-hookUpgrade fuse-overlayfsUpgrade runcUpgrade skopeoUpgrade nodejs-nodemonUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade k3sUpgrade containerdUpgrade nodejsUpgrade py3-twistedUpgrade goUpgrade h2o | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade podman-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade npmUpgrade runc-debuginfoUpgrade nodejs-nodemonUpgrade podmanUpgrade oci-umount-debugsourceUpgrade golang-srcUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade toolboxUpgrade oci-systemd-hookUpgrade nodejs-debuginfoUpgrade container-selinuxUpgrade podman-remoteUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade golang-raceUpgrade slirp4netns-debugsourceUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-testsUpgrade nodejs-docsUpgrade buildah-debuginfoUpgrade python-podman-apiUpgrade golang-docsUpgrade podman-dockerUpgrade golang-binUpgrade fuse-overlayfsUpgrade nodejsUpgrade skopeo-debuginfoUpgrade golang-testsUpgrade podman-testsUpgrade golang-miscUpgrade nodejs-packagingUpgrade runc-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade runcUpgrade buildahUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-manpagesUpgrade oci-umountUpgrade slirp4netnsUpgrade nodejs-devel-debuginfoUpgrade buildah-tests-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade skopeo-debugsourceUpgrade golang | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade nodejsUpgrade rust-h2Upgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade node8Upgrade py36-twistedUpgrade nodeUpgrade py37-twistedUpgrade traefikUpgrade py35-twistedUpgrade py27-twistedUpgrade node10Upgrade py38-twistedUpgrade h2oUpgrade h2o-devel | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade python-podman-apiUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade nodejsUpgrade golang-miscUpgrade buildahUpgrade nodejs-packagingUpgrade podman-manpagesUpgrade golangUpgrade golang-srcUpgrade podman-remoteUpgrade nodejs-develUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-dockerUpgrade oci-systemd-hookUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade golang-raceUpgrade runcUpgrade npmUpgrade oci-umountUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade skopeoUpgrade container-selinuxUpgrade podmanUpgrade podman-tests | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade golang-github-prometheus-promuUpgrade openshiftUpgrade apbUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-cluster-autoscalerUpgrade pivotUpgrade cri-oUpgrade golang-github-prometheus-alertmanagerUpgrade ignitionUpgrade csi-driver-registrarUpgrade atomic-openshift-deschedulerUpgrade csi-livenessprobeUpgrade atomic-enterprise-service-catalogUpgrade openshift-external-storageUpgrade atomic-openshift-service-idlerUpgrade ansible-service-brokerUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshiftUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade cockpitUpgrade heapsterUpgrade cri-toolsUpgrade faqUpgrade atomic-openshift-metrics-serverUpgrade image-inspectorUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-eventrouterUpgrade containernetworking-pluginsUpgrade golang-github-prometheus-prometheusUpgrade openshift-monitor-project-lifecycleUpgrade hawkular-openshift-agentUpgrade atomic-openshift-node-problem-detectorUpgrade openshift-enterprise-image-registryUpgrade openvswitch-ovn-kubernetesUpgrade csi-provisionerUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-web-consoleUpgrade csi-attacherUpgrade ansible-operator | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade oci-systemd-hook-debugsourceUpgrade skopeo-debugsourceUpgrade podman-manpagesUpgrade cockpit-podmanUpgrade golang-binUpgrade nodejs-packagingUpgrade slirp4netnsUpgrade nodejs-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade podman-remoteUpgrade nodejs-docsUpgrade python-podman-apiUpgrade runc-debugsourceUpgrade nodejsUpgrade podman-debuginfoUpgrade golang-docsUpgrade podman-dockerUpgrade podmanUpgrade buildahUpgrade golang-testsUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-debuginfoUpgrade skopeoUpgrade toolboxUpgrade oci-umountUpgrade podman-testsUpgrade runcUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade golang-miscUpgrade fuse-overlayfsUpgrade nodejs-devel-debuginfoUpgrade containernetworking-pluginsUpgrade golangUpgrade buildah-tests-debuginfoUpgrade nodejs-debuginfoUpgrade skopeo-testsUpgrade go-toolsetUpgrade container-selinuxUpgrade oci-umount-debugsourceUpgrade npmUpgrade podman-remote-debuginfoUpgrade oci-umount-debuginfoUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade golang-raceUpgrade runc-debuginfoUpgrade containers-commonUpgrade nodejs-develUpgrade oci-systemd-hookUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade nodejs-nodemonUpgrade containernetworking-plugins-debugsource | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade runc-debugsourceUpgrade skopeoUpgrade oci-systemd-hook-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-umountUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade containers-commonUpgrade runc-debuginfoUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-systemd-hookUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade oci-umount-debuginfoUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade go1.11Upgrade mozilla-nsprUpgrade mozilla-nss-develUpgrade firefox-libharfbuzz0Upgrade mozilla-nssUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libffi7Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-glib2-langUpgrade nodejs8Upgrade go1.12-raceUpgrade mozilla-nss-32bitUpgrade firefox-libgtk-3-0Upgrade go1.11-raceUpgrade firefox-gtk3-toolsUpgrade go1.12-docUpgrade nodejs12-docsUpgrade mozilla-nspr-32bitUpgrade libfirefox-gmodule-2_0-0Upgrade libfreebl3Upgrade mozilla-nss-certsUpgrade python3-twistedUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-inuktitutUpgrade nodejs10Upgrade go1.11-docUpgrade firefox-gtk3-immodule-multipressUpgrade libfirefox-gobject-2_0-0Upgrade npm12Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nspr-develUpgrade firefox-libatk-1_0-0Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs12Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-glib2-toolsUpgrade MozillaFirefoxUpgrade libsoftokn3-32bitUpgrade nodejs12-develUpgrade go1.12Upgrade libsoftokn3Upgrade firefox-gtk3-langUpgrade libfirefox-glib-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-langUpgrade firefox-atk-langUpgrade firefox-libcairo2Upgrade npm8Upgrade npm10Upgrade nodejs10-develUpgrade firefox-gtk3-immodule-ximUpgrade libfreebl3-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-dataUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certs-32bitUpgrade nodejs8-develUpgrade nodejs8-docsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs10-docsUpgrade firefox-libffi4Upgrade libfirefox-gio-2_0-0 | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twistedUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twisted-binUpgrade python3-twisted-binUpgrade python-twisted-web | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub