The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade py3-twistedUpgrade h2oUpgrade containerdUpgrade nodejs | Aug 22, 2024 | Aug 13, 2019 |
| Arista Eos | — | Upgrade to a remediated version or install provided hotfix | Sep 4, 2024 | Nov 6, 2019 |
| Centos_linux | — | Upgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-devel-debuginfoUpgrade nodejs-packagingUpgrade npmUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-debugsource | Oct 1, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade h2oUpgrade trafficserver | Oct 23, 2019 | Aug 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2019 |
| Freebsd | — | Upgrade py38-twistedUpgrade h2oUpgrade py27-twistedUpgrade node10Upgrade h2o-develUpgrade py35-twistedUpgrade py37-twistedUpgrade py36-twistedUpgrade nodeUpgrade node8 | Apr 21, 2020 | Aug 25, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Oct 14, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-nodemon | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Aug 13, 2019 |
| Red_hat Jboss_eap | — | — | Oct 27, 2020 | Aug 13, 2019 |
| Redhat Openshift | — | Upgrade sriov-network-device-plugin | Oct 8, 2019 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-devel-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade npmUpgrade nodejs | Oct 1, 2019 | Aug 13, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-gthread-2_0-0Upgrade nodejs8-docsUpgrade python3-twistedUpgrade nodejs8-develUpgrade npm12Upgrade firefox-libffi7Upgrade mozilla-nspr-32bitUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-branding-upstreamUpgrade nodejs8Upgrade nodejs12-develUpgrade mozilla-nspr-develUpgrade mozilla-nss-develUpgrade nodejs12-docsUpgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-dataUpgrade nodejs12Upgrade mozilla-nsprUpgrade firefox-glib2-langUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade libsoftokn3-32bitUpgrade firefox-atk-langUpgrade nodejs10-docsUpgrade libfreebl3Upgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-langUpgrade nodejs10Upgrade nodejs10-develUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libsoftokn3Upgrade firefox-libffi4Upgrade libfirefox-gio-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-libcairo2Upgrade npm10Upgrade mozilla-nss-certsUpgrade firefox-libpango-1_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-amharicUpgrade npm8Upgrade firefox-glib2-toolsUpgrade libfirefox-glib-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-toolsUpgrade mozilla-nssUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-langUpgrade mozilla-nss-32bitUpgrade firefox-libharfbuzz0 | Sep 11, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade python3-twisted-binUpgrade libnetty-java (Ubuntu Pro)Upgrade python3-twistedUpgrade python-twistedUpgrade python-twisted-binUpgrade python-twisted-web | Mar 20, 2020 | Aug 13, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub