Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Aug 13, 2019 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Aug 13, 2019 |
| Centos_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs-devel-debuginfoUpgrade nodejs | Oct 1, 2019 | Aug 13, 2019 |
| Debian | — | Upgrade trafficserver | Oct 23, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade node8Upgrade node10Upgrade node | Aug 21, 2019 | Aug 21, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 3, 2020 | Aug 13, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Aug 13, 2019 |
| Msft | — | 2019-08 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1507 (KB4512497)2019-08 Cumulative Update for Microsoft Windows 10, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1803 (KB4512501)2019-08 Cumulative Update for Microsoft Windows 10, version 1709 (KB4512516)2019-08 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4511553)2019-08 Cumulative Update for Microsoft Windows 10, version 1903 (KB4512508)2019-08 Cumulative Update for Microsoft Windows 10, version 1607 (KB4512517)2019-08 Cumulative Update for Microsoft Windows 10, version 1703 (KB4512507) | Aug 13, 2019 | Aug 13, 2019 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.16.1-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 13, 2019 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade npmUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-devel | Oct 5, 2022 | Aug 13, 2019 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejs-devel-debuginfoUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-devel | Oct 1, 2019 | Aug 13, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 13, 2019 |
| Suse | — | Upgrade libsoftokn3Upgrade firefox-gtk3-immodule-multipressUpgrade npm12Upgrade libfreebl3Upgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade nodejs10-docsUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nspr-32bitUpgrade nodejs12-docsUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade MozillaFirefoxUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nsprUpgrade nodejs10-develUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade firefox-libgtk-3-0Upgrade firefox-gtk3-dataUpgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi4Upgrade firefox-libpango-1_0-0Upgrade nodejs8Upgrade firefox-gtk3-toolsUpgrade libfreebl3-32bitUpgrade nodejs12Upgrade nodejs8-docsUpgrade mozilla-nssUpgrade MozillaFirefox-branding-SLEDUpgrade nodejs8-develUpgrade libfirefox-gio-2_0-0Upgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-langUpgrade firefox-libcairo-gobject2Upgrade firefox-gio-branding-upstreamUpgrade mozilla-nss-certsUpgrade npm8Upgrade nodejs10Upgrade firefox-gtk3-immodule-ximUpgrade firefox-glib2-toolsUpgrade nodejs12-develUpgrade firefox-atk-langUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libcairo2Upgrade libfirefox-glib-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libffi7Upgrade npm10Upgrade mozilla-nss-32bit | Sep 11, 2019 | Aug 13, 2019 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro) | Mar 22, 2023 | Aug 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub