A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-dockerUpgrade toolboxUpgrade criu-develUpgrade criuUpgrade crunUpgrade libslirp-develUpgrade udicaUpgrade podman-testsUpgrade libslirpUpgrade netavarkUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podman-catatonitUpgrade python3-podmanUpgrade podman-gvproxyUpgrade conmonUpgrade slirp4netnsUpgrade skopeoUpgrade podmanUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade runcUpgrade criu-libsUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade buildahUpgrade containers-commonUpgrade critUpgrade python3-criuUpgrade cockpit-podmanUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade container-selinux | Nov 16, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade goUpgrade podman | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade nerdctlUpgrade containerdUpgrade golang-binUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade containerd-debuginfoUpgrade cri-tools-debuginfoUpgrade containerd-stressUpgrade rclone-debuginfoUpgrade cni-pluginsUpgrade amazon-ecr-credential-helperUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade golang-srcUpgrade amazon-ssm-agent-debuginfoUpgrade rcloneUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade dockerUpgrade cni-plugins-debuginfoUpgrade cri-tools | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golangUpgrade containerdUpgrade docker | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helperUpgrade golang-miscUpgrade golang-raceUpgrade cni-plugins-debuginfoUpgrade docker-debugsourceUpgrade golang-srcUpgrade golang-sharedUpgrade cni-plugins-debugsourceUpgrade docker-debuginfoUpgrade cni-pluginsUpgrade golangUpgrade ecs-initUpgrade amazon-ssm-agent-debugsourceUpgrade nerdctlUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade golang-docsUpgrade golang-testsUpgrade docker | Feb 17, 2025 | Feb 17, 2023 |
| Centos_linux | — | Upgrade buildah-tests-debuginfoUpgrade criu-develUpgrade golang-testsUpgrade critUpgrade podman-remote-debuginfoUpgrade rhcUpgrade containers-commonUpgrade delveUpgrade golangUpgrade golang-srcUpgrade netavarkUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade aardvark-dnsUpgrade crun-debugsourceUpgrade toolboxUpgrade toolbox-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade golang-docsUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade udicaUpgrade fuse-overlayfsUpgrade golang-binUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade podman-gvproxy-debuginfoUpgrade criu-libsUpgrade podmanUpgrade delve-debuginfoUpgrade python3-criuUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade rhc-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-debugsourceUpgrade podman-dockerUpgrade buildah-testsUpgrade rhc-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade libslirpUpgrade slirp4netnsUpgrade python3-podmanUpgrade golang-raceUpgrade conmon | Oct 25, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19Upgrade golang-golang-x-net | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 31, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Mar 13, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade libslirpUpgrade criu-develUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade crunUpgrade podman-testsUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade podman-pluginsUpgrade python3-criuUpgrade slirp4netnsUpgrade critUpgrade libslirp-develUpgrade containers-commonUpgrade container-selinuxUpgrade fuse-overlayfsUpgrade criuUpgrade podmanUpgrade netavarkUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade runcUpgrade buildahUpgrade buildah-testsUpgrade podman-dockerUpgrade python3-podmanUpgrade conmonUpgrade udicaUpgrade podman-remoteUpgrade aardvark-dns | Nov 16, 2023 | Feb 17, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podman | May 19, 2023 | Feb 17, 2023 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade rhc-debuginfoUpgrade podman-dockerUpgrade runc-debugsourceUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade crunUpgrade podman-catatonitUpgrade toolboxUpgrade udicaUpgrade python3-criuUpgrade skopeoNo solution existsUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade delve-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade conmon-debuginfoUpgrade golang-miscUpgrade delveUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade rhcUpgrade podman-plugins-debuginfoUpgrade golangUpgrade libslirpUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade criu-develUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade rhc-debugsourceUpgrade conmonUpgrade golang-raceUpgrade libslirp-develUpgrade cockpit-podmanUpgrade python3-podmanUpgrade buildah-testsUpgrade go-toolsetUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-gvproxyUpgrade podmanUpgrade netavarkUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade criuUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade golang-binUpgrade critUpgrade podman-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade toolbox-tests | Oct 25, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade containers-commonUpgrade conmonUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade criuUpgrade netavarkUpgrade podmanUpgrade podman-pluginsUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade buildahUpgrade criu-libsUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade critUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade crunUpgrade python3-criuUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-testsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade runcUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-devel | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade grafanaUpgrade golang-github-prometheus-prometheusUpgrade prometheus-postgres_exporterUpgrade helmUpgrade go1.18-raceUpgrade go1.20-raceUpgrade go1.18-opensslUpgrade go1.19Upgrade golang-github-lusitaniae-apache_exporterUpgrade supportutils-plugin-susemanager-clientUpgrade dracut-saltbootUpgrade go1.20-docUpgrade golang-github-qubitproducts-exporter_exporterUpgrade helm-bash-completionUpgrade firewalld-prometheus-configUpgrade go1.18-docUpgrade container-suseconnectUpgrade go1.19-raceUpgrade go1.19-docUpgrade golang-github-prometheus-node_exporterUpgrade go1.20Upgrade helm-fish-completionUpgrade supportutils-plugin-saltUpgrade helm-zsh-completionUpgrade prometheus-blackbox_exporterUpgrade spacecmdUpgrade go1.18-openssl-docUpgrade go1.18 | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.17-srcUpgrade golang-1.17-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro) | Nov 15, 2024 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub