Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Aug 13, 2019 |
| Centos_linux | — | Upgrade npmUpgrade nodejs-devel-debuginfoUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-debuginfo | Oct 1, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserver | Oct 23, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade node10Upgrade nodeUpgrade node8 | Aug 21, 2019 | Aug 21, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Oct 14, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade npm | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-devel | Oct 1, 2019 | Aug 13, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefoxUpgrade firefox-libharfbuzz0Upgrade nodejs10-docsUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade libfirefox-gmodule-2_0-0Upgrade nodejs10-develUpgrade libsoftokn3Upgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodules-tigrignaUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfreebl3Upgrade libsoftokn3-32bitUpgrade mozilla-nsprUpgrade firefox-glib2-langUpgrade firefox-libgtk-3-0Upgrade mozilla-nspr-32bitUpgrade mozilla-nspr-develUpgrade npm12Upgrade firefox-gtk3-dataUpgrade nodejs12-docsUpgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade nodejs8-docsUpgrade firefox-gio-branding-upstreamUpgrade npm10Upgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-langUpgrade nodejs12Upgrade libfreebl3-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gio-2_0-0Upgrade nodejs8-develUpgrade firefox-gtk3-immodule-ximUpgrade nodejs8Upgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nssUpgrade firefox-libffi4Upgrade firefox-gtk3-langUpgrade mozilla-nss-certs-32bitUpgrade firefox-libpango-1_0-0Upgrade firefox-libatk-1_0-0Upgrade nodejs12-develUpgrade mozilla-nss-certsUpgrade firefox-gtk3-toolsUpgrade libfirefox-gobject-2_0-0Upgrade npm8Upgrade nodejs10Upgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-atk-langUpgrade firefox-glib2-toolsUpgrade mozilla-nss-32bit | Sep 11, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro) | Mar 22, 2023 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub