A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade python3-criuUpgrade toolbox-testsUpgrade buildahUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade critUpgrade fuse-overlayfsUpgrade criu-libsUpgrade podman-remoteUpgrade runcUpgrade aardvark-dnsUpgrade containers-commonUpgrade crunUpgrade skopeoUpgrade libslirp-develUpgrade libslirpUpgrade python3-podmanUpgrade conmonUpgrade podmanUpgrade netavarkUpgrade criuUpgrade podman-catatonitUpgrade podman-testsUpgrade podman-pluginsUpgrade udicaUpgrade podman-dockerUpgrade criu-develUpgrade slirp4netnsUpgrade skopeo-testsUpgrade toolboxUpgrade podman-gvproxy | Nov 16, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade goUpgrade podman | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-miscUpgrade cri-toolsUpgrade amazon-ssm-agent-debuginfoUpgrade golang-srcUpgrade docker-debuginfoUpgrade dockerUpgrade golangUpgrade rcloneUpgrade golang-raceUpgrade cni-plugins-debuginfoUpgrade cni-pluginsUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade rclone-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade nerdctl-debuginfoUpgrade cri-tools-debuginfoUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade nerdctlUpgrade golang-bin | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade containerdUpgrade golangUpgrade amazon-ssm-agentUpgrade docker | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade docker-debugsourceUpgrade golang-raceUpgrade amazon-ssm-agentUpgrade golang-miscUpgrade amazon-ecr-credential-helperUpgrade docker-debuginfoUpgrade cni-plugins-debuginfoUpgrade cni-plugins-debugsourceUpgrade golang-srcUpgrade golang-sharedUpgrade cni-pluginsUpgrade amazon-ssm-agent-debugsourceUpgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade nerdctlUpgrade amazon-ssm-agent-debuginfoUpgrade golangUpgrade ecs-initUpgrade docker | Feb 17, 2025 | Feb 17, 2023 |
| Centos_linux | — | Upgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade rhc-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-debuginfoUpgrade crunUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade runc-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade conmonUpgrade container-selinuxUpgrade buildahUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade cockpit-podmanUpgrade podman-testsUpgrade crun-debuginfoUpgrade rhc-debuginfoUpgrade podman-dockerUpgrade buildah-testsUpgrade golang-raceUpgrade podman-debugsourceUpgrade toolbox-debuginfoUpgrade golang-testsUpgrade containers-commonUpgrade rhcUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade golang-srcUpgrade golangUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade toolboxUpgrade runcUpgrade podman-remoteUpgrade podman-catatonitUpgrade golang-docsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade buildah-debugsourceUpgrade udicaUpgrade runc-debuginfoUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade critUpgrade delve-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade skopeoUpgrade criu-debugsource | Oct 25, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-golang-x-netUpgrade golang-1.19 | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 31, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Mar 13, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade libslirp-develUpgrade container-selinuxUpgrade podman-testsUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade crunUpgrade criu-develUpgrade containers-commonUpgrade libslirpUpgrade python3-criuUpgrade skopeo-testsUpgrade slirp4netnsUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-catatonitUpgrade podmanUpgrade runcUpgrade buildahUpgrade netavarkUpgrade containernetworking-pluginsUpgrade skopeoUpgrade python3-podmanUpgrade podman-remoteUpgrade conmonUpgrade udicaUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade criuUpgrade podman-docker | Nov 16, 2023 | Feb 17, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podman | May 19, 2023 | Feb 17, 2023 |
| Redhat_linux | — | Upgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade rhcUpgrade golang-srcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delveUpgrade crun-debuginfoUpgrade golang-raceUpgrade criu-debuginfoUpgrade conmonUpgrade libslirp-develUpgrade container-selinuxUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade go-toolsetUpgrade delve-debuginfoUpgrade buildah-testsUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade golangUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade podman-debugsourceUpgrade python3-podmanUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade rhc-debugsourceUpgrade libslirpUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsNo solution existsUpgrade golang-binUpgrade golang-docsUpgrade fuse-overlayfsUpgrade criuUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade golang-testsUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade critUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade crunUpgrade netavarkUpgrade buildah-debuginfoUpgrade libslirp-debugsourceUpgrade rhc-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade buildahUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade python3-criuUpgrade toolboxUpgrade udica | Oct 25, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade crun-debuginfoUpgrade python3-criuUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade runcUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade criu-debugsourceUpgrade libslirp-develUpgrade crunUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade podman-gvproxyUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade podman-catatonitUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-pluginsUpgrade buildah-debuginfoUpgrade libslirpUpgrade criu-libsUpgrade podman-testsUpgrade podmanUpgrade criuUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade buildahUpgrade podman-remote-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade helm-fish-completionUpgrade go1.18Upgrade spacecmdUpgrade go1.18-openssl-docUpgrade prometheus-blackbox_exporterUpgrade helm-zsh-completionUpgrade go1.19-raceUpgrade go1.19-docUpgrade golang-github-prometheus-node_exporterUpgrade go1.20Upgrade supportutils-plugin-saltUpgrade firewalld-prometheus-configUpgrade golang-github-lusitaniae-apache_exporterUpgrade helm-bash-completionUpgrade golang-github-prometheus-prometheusUpgrade go1.18-openssl-raceUpgrade go1.19Upgrade prometheus-postgres_exporterUpgrade grafanaUpgrade golang-github-qubitproducts-exporter_exporterUpgrade go1.20-raceUpgrade go1.18-opensslUpgrade go1.20-docUpgrade go1.18-raceUpgrade supportutils-plugin-susemanager-clientUpgrade container-suseconnectUpgrade helmUpgrade dracut-saltbootUpgrade go1.18-doc | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro) | Nov 15, 2024 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub