A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade skopeoUpgrade criu-develUpgrade podman-catatonitUpgrade libslirpUpgrade podmanUpgrade criuUpgrade podman-pluginsUpgrade crunUpgrade podman-dockerUpgrade netavarkUpgrade podman-testsUpgrade toolboxUpgrade conmonUpgrade python3-podmanUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade udicaUpgrade slirp4netnsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade cockpit-podmanUpgrade runcUpgrade containers-commonUpgrade aardvark-dnsUpgrade criu-libsUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade critUpgrade buildahUpgrade python3-criuUpgrade podman-remote | Nov 16, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade podmanUpgrade go | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade cri-toolsUpgrade golang-miscUpgrade rcloneUpgrade golang-raceUpgrade cni-plugins-debuginfoUpgrade dockerUpgrade golang-srcUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade amazon-ssm-agent-debuginfoUpgrade golangUpgrade amazon-ssm-agentUpgrade cni-pluginsUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade rclone-debuginfoUpgrade containerdUpgrade nerdctlUpgrade golang-testsUpgrade nerdctl-debuginfoUpgrade golang-binUpgrade cri-tools-debuginfoUpgrade golang-docsUpgrade containerd-stressUpgrade containerd-debuginfo | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade dockerUpgrade amazon-ssm-agentUpgrade containerdUpgrade golang | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade docker-debugsourceUpgrade golang-raceUpgrade golang-sharedUpgrade cni-plugins-debuginfoUpgrade cni-plugins-debugsourceUpgrade amazon-ssm-agentUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-srcUpgrade golang-miscUpgrade cni-pluginsUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade nerdctlUpgrade dockerUpgrade amazon-ssm-agent-debugsourceUpgrade ecs-init | Feb 17, 2025 | Feb 17, 2023 |
| Centos_linux | — | Upgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debugsourceUpgrade python3-podmanUpgrade slirp4netnsUpgrade rhc-debuginfoUpgrade cockpit-podmanUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade crunUpgrade toolbox-testsUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade rhc-debugsourceUpgrade container-selinuxUpgrade golang-raceUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade golang-docsUpgrade runc-debuginfoUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade udicaUpgrade delveUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade golang-srcUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade skopeoUpgrade python3-criuUpgrade criu-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade delve-debuginfoUpgrade critUpgrade podmanUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade rhcUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade toolboxUpgrade runcUpgrade podman-remoteUpgrade podman-catatonit | Oct 25, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-golang-x-netUpgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 31, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Mar 13, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade criu-develUpgrade skopeo-testsUpgrade critUpgrade cockpit-podmanUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade libslirp-develUpgrade crunUpgrade podman-pluginsUpgrade podman-testsUpgrade python3-criuUpgrade criu-libsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade podman-catatonitUpgrade skopeoUpgrade buildah-testsUpgrade python3-podmanUpgrade runcUpgrade criuUpgrade podmanUpgrade netavarkUpgrade buildahUpgrade fuse-overlayfsUpgrade udicaUpgrade podman-remoteUpgrade conmon | Nov 16, 2023 | Feb 17, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podman | May 19, 2023 | Feb 17, 2023 |
| Redhat_linux | — | Upgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade golang-docsUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade runcUpgrade rhc-debuginfoUpgrade podman-pluginsUpgrade podman-remoteUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade skopeoUpgrade python3-criuUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade critUpgrade golang-testsUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade golang-binUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade podman-dockerNo solution existsUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade udicaUpgrade crunUpgrade buildahUpgrade podmanUpgrade skopeo-debuginfoUpgrade criu-develUpgrade delveUpgrade python3-podmanUpgrade podman-debugsourceUpgrade libslirp-develUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade podman-testsUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade rhc-debugsourceUpgrade libslirpUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade slirp4netns-debugsourceUpgrade golang-miscUpgrade containers-commonUpgrade conmon-debuginfoUpgrade golang-srcUpgrade rhcUpgrade golangUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-testsUpgrade golang-raceUpgrade criu-libsUpgrade delve-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmon | Oct 25, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade podman-testsUpgrade criu-libsUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade conmonUpgrade podmanUpgrade netavarkUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade libslirp-debugsourceUpgrade runc-debugsourceUpgrade python3-criuUpgrade runcUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade crunUpgrade criu-devel | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade supportutils-plugin-susemanager-clientUpgrade grafanaUpgrade go1.18-docUpgrade container-suseconnectUpgrade dracut-saltbootUpgrade helmUpgrade helm-bash-completionUpgrade firewalld-prometheus-configUpgrade go1.18-opensslUpgrade prometheus-postgres_exporterUpgrade golang-github-qubitproducts-exporter_exporterUpgrade go1.19Upgrade go1.20-raceUpgrade golang-github-lusitaniae-apache_exporterUpgrade golang-github-prometheus-prometheusUpgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.20-docUpgrade go1.18Upgrade go1.18-openssl-docUpgrade spacecmdUpgrade supportutils-plugin-saltUpgrade go1.19-docUpgrade prometheus-blackbox_exporterUpgrade helm-zsh-completionUpgrade golang-github-prometheus-node_exporterUpgrade go1.19-raceUpgrade helm-fish-completionUpgrade go1.20 | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.17-go | Nov 15, 2024 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub