Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade runcUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade skopeoUpgrade oci-systemd-hookUpgrade oci-umountUpgrade containers-common | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade h2oUpgrade nodejsUpgrade goUpgrade containerdUpgrade k3s | Nov 8, 2019 | Aug 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-miscUpgrade golang-docs | Apr 27, 2020 | Aug 13, 2019 |
| Amazon_linux | — | Upgrade golang | Aug 28, 2019 | Aug 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade runc-debugsourceUpgrade nodejs-packagingUpgrade oci-systemd-hook-debuginfoUpgrade buildah-tests-debuginfoUpgrade nodejsUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade golang-miscUpgrade golang-docsUpgrade golangUpgrade nodejs-devel-debuginfoUpgrade golang-binUpgrade python-podman-apiUpgrade nodejs-develUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade podman-manpagesUpgrade podman-testsUpgrade buildahUpgrade oci-systemd-hook-debugsourceUpgrade nodejs-debugsourceUpgrade oci-umountUpgrade nodejs-docsUpgrade buildah-testsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade golang-testsUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade runcUpgrade podman-remoteUpgrade toolboxUpgrade podman-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade nodejs-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade golang-raceUpgrade nodejs-nodemonUpgrade oci-umount-debugsourceUpgrade npmUpgrade golang-srcUpgrade containers-commonUpgrade oci-umount-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade oci-systemd-hookUpgrade container-selinux | Sep 11, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade nodejsUpgrade rust-h2Upgrade trafficserver | Aug 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade node10Upgrade py38-twistedUpgrade h2o-develUpgrade h2oUpgrade py27-twistedUpgrade py37-twistedUpgrade py36-twistedUpgrade nodeUpgrade node8Upgrade py35-twistedUpgrade traefik | Apr 21, 2020 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Jan 20, 2021 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Sep 24, 2019 | Aug 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Sep 30, 2019 | Aug 13, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Kubernetes | — | Upgrade Kubernetes to version 1.13.10Upgrade Kubernetes to version 1.15.3Upgrade Kubernetes to version 1.14.6 | Sep 11, 2019 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade system/library/gcc/gcc-go-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-c-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-common-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gfortran-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-go to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gobjc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade developer/gcc/gcc-c++ to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-gfortran-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-go-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-c-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade developer/gcc/gcc-gobjc-9 to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade system/library/gcc/gcc-runtime to version 9.2.0-11.4.21.0.1.69.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade golang-srcUpgrade slirp4netnsUpgrade nodejs-develUpgrade podman-remoteUpgrade golang-miscUpgrade nodejsUpgrade golangUpgrade buildahUpgrade podman-dockerUpgrade go-toolsetUpgrade podman-manpagesUpgrade buildah-testsUpgrade nodejs-packagingUpgrade python-podman-apiUpgrade oci-systemd-hookUpgrade golang-testsUpgrade runcUpgrade containers-commonUpgrade nodejs-docsUpgrade golang-docsUpgrade nodejs-nodemonUpgrade podmanUpgrade container-selinuxUpgrade podman-testsUpgrade oci-umountUpgrade npmUpgrade golang-raceUpgrade golang-binUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-plugins | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade ansible-service-brokerUpgrade csi-driver-registrarUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-enterprise-service-catalogUpgrade containernetworking-pluginsUpgrade golang-github-prometheus-prometheusUpgrade openshift-enterprise-image-registryUpgrade atomic-openshift-node-problem-detectorUpgrade openshift-eventrouterUpgrade openshift-enterprise-autohealUpgrade openvswitch-ovn-kubernetesUpgrade openshift-monitor-project-lifecycleUpgrade image-inspectorUpgrade csi-attacherUpgrade hawkular-openshift-agentUpgrade atomic-openshift-web-consoleUpgrade faqUpgrade csi-provisionerUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-openshift-metrics-serverUpgrade ansible-operatorUpgrade heapsterUpgrade openshift-enterprise-cluster-capacityUpgrade csi-livenessprobeUpgrade cockpitUpgrade atomic-openshift-deschedulerUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-dockerregistryUpgrade cri-toolsUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshift-service-idlerUpgrade ignitionUpgrade apbUpgrade golang-github-prometheus-promuUpgrade atomic-openshiftUpgrade golang-github-openshift-prometheus-alert-bufferUpgrade pivotUpgrade openshiftUpgrade cri-oUpgrade openshift-external-storage | Sep 12, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-systemd-hookUpgrade npmUpgrade oci-umount-debugsourceUpgrade container-selinuxUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade nodejs-nodemonUpgrade oci-umount-debuginfoUpgrade nodejs-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsourceUpgrade nodejs-develUpgrade golang-raceUpgrade golang-binUpgrade skopeo-debugsourceUpgrade oci-systemd-hook-debugsourceUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade python-podman-apiUpgrade nodejsUpgrade podman-manpagesUpgrade fuse-overlayfsUpgrade buildahUpgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade cockpit-podmanUpgrade golang-miscUpgrade podman-remoteUpgrade golangUpgrade golang-testsUpgrade podman-debuginfoUpgrade nodejs-docsUpgrade podmanUpgrade oci-systemd-hook-debuginfoUpgrade runcUpgrade golang-docsUpgrade podman-testsUpgrade nodejs-packagingUpgrade fuse-overlayfs-debuginfoUpgrade buildah-testsUpgrade toolboxUpgrade skopeoUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade oci-umount | Sep 11, 2019 | Aug 13, 2019 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade oci-umountUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade fuse-overlayfsUpgrade oci-systemd-hook-debuginfoUpgrade skopeoUpgrade oci-systemd-hook-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-umount-debugsourceUpgrade containers-commonUpgrade oci-systemd-hookUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-umount-debuginfo | Mar 12, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade go1.11Upgrade go1.12-docUpgrade libfirefox-gobject-2_0-0Upgrade nodejs8Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nss-certsUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-toolsUpgrade firefox-gio-branding-upstreamUpgrade mozillafirefox-branding-sledUpgrade go1.11-docUpgrade python3-twistedUpgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-develUpgrade nodejs10Upgrade mozilla-nsprUpgrade go1.12-raceUpgrade nodejs12-docsUpgrade firefox-gdk-pixbuf-query-loadersUpgrade mozillafirefox-translations-commonUpgrade firefox-libffi7Upgrade mozilla-nssUpgrade firefox-libgtk-3-0Upgrade npm12Upgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade mozilla-nss-32bitUpgrade libfreebl3Upgrade firefox-gtk3-immodules-tigrignaUpgrade go1.11-raceUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-ximUpgrade firefox-libpango-1_0-0Upgrade npm8Upgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gthread-2_0-0Upgrade nodejs10-develUpgrade firefox-libcairo2Upgrade nodejs10-docsUpgrade nodejs8-develUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozillafirefox-translations-otherUpgrade npm10Upgrade firefox-libffi4Upgrade libfreebl3-32bitUpgrade firefox-atk-langUpgrade firefox-gtk3-langUpgrade firefox-libcairo-gobject2Upgrade mozillafirefoxUpgrade go1.12Upgrade libsoftokn3Upgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-amharicUpgrade nodejs12-develUpgrade nodejs8-docsUpgrade nodejs12Upgrade libsoftokn3-32bitUpgrade firefox-libatk-1_0-0 | Aug 27, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python-twisted-binUpgrade python-twisted-webUpgrade python3-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twisted | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub