Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade oci-umountUpgrade fuse-overlayfsUpgrade oci-systemd-hookUpgrade nodejs-nodemonUpgrade containernetworking-pluginsUpgrade runcUpgrade skopeoUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade h2oUpgrade py3-twistedUpgrade nodejsUpgrade goUpgrade containerdUpgrade k3s | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade runc-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade oci-systemd-hookUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade podman-debuginfoUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade podmanUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade oci-umount-debugsourceUpgrade npmUpgrade oci-umount-debuginfoUpgrade containers-commonUpgrade golang-srcUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade python-podman-apiUpgrade cockpit-podmanUpgrade nodejs-devel-debuginfoUpgrade golang-docsUpgrade podman-testsUpgrade fuse-overlayfsUpgrade golang-binUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade podman-manpagesUpgrade buildahUpgrade runcUpgrade runc-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade nodejs-packagingUpgrade skopeo-debuginfoUpgrade nodejs-docsUpgrade golang-miscUpgrade nodejs-develUpgrade golang-testsUpgrade nodejsUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade nodejs-debugsourceUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade oci-umountUpgrade golangUpgrade podman-docker | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade nodejsUpgrade h2oUpgrade rust-h2Upgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py36-twistedUpgrade node8Upgrade traefikUpgrade py35-twistedUpgrade nodeUpgrade py37-twistedUpgrade node10Upgrade h2oUpgrade py27-twistedUpgrade py38-twistedUpgrade h2o-devel | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.14.6Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.13.10 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade oci-systemd-hookUpgrade go-toolsetUpgrade python-podman-apiUpgrade podman-manpagesUpgrade golangUpgrade podman-dockerUpgrade golang-srcUpgrade nodejs-develUpgrade podman-remoteUpgrade buildahUpgrade nodejsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade nodejs-packagingUpgrade golang-miscUpgrade fuse-overlayfsUpgrade skopeoUpgrade containers-commonUpgrade golang-binUpgrade runcUpgrade npmUpgrade golang-testsUpgrade oci-umountUpgrade podman-testsUpgrade podmanUpgrade container-selinuxUpgrade golang-raceUpgrade nodejs-docsUpgrade golang-docsUpgrade nodejs-nodemonUpgrade skopeo-testsUpgrade containernetworking-plugins | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade heapsterUpgrade openshiftUpgrade csi-driver-registrarUpgrade cri-oUpgrade golang-github-prometheus-alertmanagerUpgrade pivotUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-deschedulerUpgrade openshift-enterprise-cluster-capacityUpgrade openshift-external-storageUpgrade golang-github-prometheus-node_exporterUpgrade cockpitUpgrade ignitionUpgrade cri-toolsUpgrade ansible-service-brokerUpgrade atomic-openshift-dockerregistryUpgrade csi-livenessprobeUpgrade golang-github-prometheus-promuUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade apbUpgrade atomic-openshift-service-idlerUpgrade atomic-openshiftUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-enterprise-image-registryUpgrade openshift-monitor-project-lifecycleUpgrade csi-attacherUpgrade containernetworking-pluginsUpgrade hawkular-openshift-agentUpgrade image-inspectorUpgrade atomic-openshift-metrics-serverUpgrade faqUpgrade atomic-openshift-web-consoleUpgrade golang-github-prometheus-prometheusUpgrade openshift-eventrouterUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-node-problem-detectorUpgrade csi-provisionerUpgrade ansible-operatorUpgrade openvswitch-ovn-kubernetes | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade containernetworking-pluginsUpgrade oci-systemd-hook-debuginfoUpgrade golang-testsUpgrade python-podman-apiUpgrade skopeo-debugsourceUpgrade buildahUpgrade golang-binUpgrade podman-manpagesUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade golangUpgrade nodejs-devel-debuginfoUpgrade podmanUpgrade oci-systemd-hook-debugsourceUpgrade golang-miscUpgrade nodejs-packagingUpgrade runcUpgrade buildah-testsUpgrade skopeoUpgrade nodejsUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade toolboxUpgrade podman-testsUpgrade golang-docsUpgrade podman-remoteUpgrade podman-debuginfoUpgrade nodejs-docsUpgrade slirp4netnsUpgrade nodejs-debugsourceUpgrade oci-umountUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-umount-debugsourceUpgrade golang-raceUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade containers-commonUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade container-selinuxUpgrade nodejs-develUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade go-toolsetUpgrade oci-umount-debuginfoUpgrade nodejs-nodemonUpgrade containernetworking-plugins-debuginfoUpgrade npmUpgrade fuse-overlayfs-debugsourceUpgrade oci-systemd-hookUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade nodejs-debuginfo | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade skopeoUpgrade oci-umountUpgrade runcUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade oci-systemd-hook-debugsourceUpgrade oci-systemd-hook-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hookUpgrade runc-debuginfoUpgrade oci-umount-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade libfirefox-gobject-2_0-0Upgrade nodejs8Upgrade firefox-glib2-langUpgrade nodejs10Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfreebl3Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-thaiUpgrade npm12Upgrade python3-twistedUpgrade go1.12-raceUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade firefox-gtk3-toolsUpgrade go1.11-raceUpgrade go1.12-docUpgrade firefox-libharfbuzz0Upgrade go1.11Upgrade firefox-gio-branding-upstreamUpgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade nodejs12-docsUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libgtk-3-0Upgrade mozilla-nsprUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nspr-32bitUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-multipressUpgrade go1.11-docUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-certs-32bitUpgrade nodejs8-develUpgrade libfirefox-gthread-2_0-0Upgrade nodejs10-docsUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-ximUpgrade go1.12Upgrade nodejs12-develUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-langUpgrade firefox-libpango-1_0-0Upgrade firefox-libffi4Upgrade MozillaFirefox-translations-commonUpgrade firefox-libcairo2Upgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-langUpgrade npm10Upgrade nodejs10-develUpgrade libfirefox-glib-2_0-0Upgrade MozillaFirefoxUpgrade firefox-libcairo-gobject2Upgrade nodejs12Upgrade libfreebl3-32bitUpgrade mozilla-nspr-develUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3Upgrade nodejs8-docsUpgrade npm8Upgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gio-2_0-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-vietnamese | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twistedUpgrade python3-twistedUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twisted-binUpgrade python-twisted-binUpgrade python-twisted-web | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub