A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeo-testsUpgrade netavarkUpgrade podmanUpgrade libslirp-develUpgrade libslirpUpgrade python3-podmanUpgrade skopeoUpgrade toolboxUpgrade crunUpgrade criuUpgrade udicaUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade podman-pluginsUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-testsUpgrade conmonUpgrade criu-develUpgrade container-selinuxUpgrade aardvark-dnsUpgrade podman-remoteUpgrade containers-commonUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade buildah-testsUpgrade toolbox-testsUpgrade critUpgrade fuse-overlayfsUpgrade runcUpgrade python3-criu | Nov 16, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade goUpgrade podman | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade nerdctlUpgrade golang-testsUpgrade cni-pluginsUpgrade containerd-stressUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade golang-docsUpgrade cri-tools-debuginfoUpgrade nerdctl-debuginfoUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade containerdUpgrade rclone-debuginfoUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agent-debuginfoUpgrade golang-srcUpgrade rcloneUpgrade amazon-ecr-credential-helper-debuginfoUpgrade dockerUpgrade golang-raceUpgrade docker-debuginfoUpgrade cri-toolsUpgrade golangUpgrade golang-misc | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade dockerUpgrade golangUpgrade containerdUpgrade amazon-ssm-agent | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade cni-pluginsUpgrade golang-testsUpgrade golangUpgrade amazon-ssm-agent-debugsourceUpgrade nerdctlUpgrade ecs-initUpgrade dockerUpgrade golang-docsUpgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helperUpgrade golang-srcUpgrade golang-raceUpgrade cni-plugins-debuginfoUpgrade docker-debugsourceUpgrade golang-sharedUpgrade cni-plugins-debugsourceUpgrade docker-debuginfoUpgrade golang-misc | Feb 17, 2025 | Feb 17, 2023 |
| Centos_linux | — | Upgrade rhc-debuginfoUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade go-toolsetUpgrade libslirpUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade python3-podmanUpgrade crunUpgrade podman-debugsourceUpgrade buildahUpgrade golang-raceUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade rhc-debugsourceUpgrade conmonUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade delveUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade rhcUpgrade criu-develUpgrade critUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade golang-binUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade udicaUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade criu-libsUpgrade delve-debuginfoUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade toolboxUpgrade runcUpgrade podman-remoteUpgrade podman-catatonitUpgrade golang-docsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade golang-srcUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade golangUpgrade skopeoUpgrade python3-criu | Oct 25, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-golang-x-netUpgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engineUpgrade docker-engine-selinux | May 31, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Mar 13, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade podman-pluginsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade slirp4netnsUpgrade podman-testsUpgrade cockpit-podmanUpgrade containers-commonUpgrade critUpgrade libslirpUpgrade crunUpgrade libslirp-develUpgrade criu-develUpgrade container-selinuxUpgrade skopeo-testsUpgrade python3-podmanUpgrade aardvark-dnsUpgrade netavarkUpgrade fuse-overlayfsUpgrade criuUpgrade podmanUpgrade containernetworking-pluginsUpgrade skopeoUpgrade runcUpgrade conmonUpgrade udicaUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-catatonitUpgrade buildah-testsUpgrade buildah | Nov 16, 2023 | Feb 17, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podman | May 19, 2023 | Feb 17, 2023 |
| Redhat_linux | — | Upgrade runc-debugsourceUpgrade podman-remoteUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade runcUpgrade libslirp-debugsourceUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-docsUpgrade rhc-debuginfoUpgrade slirp4netns-debuginfoUpgrade udicaUpgrade toolboxUpgrade crunUpgrade python3-criuUpgrade skopeoUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade golang-testsUpgrade skopeo-debugsourceUpgrade golang-binUpgrade netavarkNo solution existsUpgrade critUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade criuUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podman-pluginsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade python3-podmanUpgrade container-selinuxUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade delveUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade rhc-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade buildah-testsUpgrade libslirp-develUpgrade delve-debuginfoUpgrade libslirpUpgrade golang-raceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade criu-libsUpgrade podman-testsUpgrade skopeo-testsUpgrade golangUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade golang-srcUpgrade criu-debuginfoUpgrade rhcUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade podman-debugsource | Oct 25, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade criu-develUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade buildah-testsUpgrade libslirp-develUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade critUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade containers-commonUpgrade podmanUpgrade libslirpUpgrade criuUpgrade netavarkUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.18Upgrade spacecmdUpgrade go1.18-openssl-docUpgrade golang-github-prometheus-node_exporterUpgrade go1.19-docUpgrade prometheus-blackbox_exporterUpgrade supportutils-plugin-saltUpgrade go1.19-raceUpgrade helm-zsh-completionUpgrade go1.20Upgrade helm-fish-completionUpgrade helm-bash-completionUpgrade go1.20-docUpgrade firewalld-prometheus-configUpgrade go1.18-opensslUpgrade golang-github-lusitaniae-apache_exporterUpgrade golang-github-qubitproducts-exporter_exporterUpgrade go1.18-raceUpgrade go1.19Upgrade go1.20-raceUpgrade container-suseconnectUpgrade supportutils-plugin-susemanager-clientUpgrade golang-github-prometheus-prometheusUpgrade go1.18-openssl-raceUpgrade grafanaUpgrade prometheus-postgres_exporterUpgrade dracut-saltbootUpgrade go1.18-docUpgrade helm | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18-goUpgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.18-srcUpgrade golang-1.18 (Ubuntu Pro) | Nov 15, 2024 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub