A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netavarkUpgrade skopeo-testsUpgrade criuUpgrade toolboxUpgrade libslirpUpgrade skopeoUpgrade conmonUpgrade podmanUpgrade criu-develUpgrade udicaUpgrade podman-pluginsUpgrade python3-podmanUpgrade libslirp-develUpgrade podman-testsUpgrade podman-catatonitUpgrade crunUpgrade podman-dockerUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildahUpgrade containers-commonUpgrade critUpgrade buildah-testsUpgrade runcUpgrade cockpit-podmanUpgrade python3-criuUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade criu-libsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade fuse-overlayfs | Nov 16, 2023 | Feb 28, 2023 |
| Alpine Linux | — | Upgrade goUpgrade podman | Aug 22, 2024 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade golang-binUpgrade rclone-debuginfoUpgrade cri-tools-debuginfoUpgrade containerd-stressUpgrade cni-pluginsUpgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helperUpgrade nerdctl-debuginfoUpgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade nerdctlUpgrade containerdUpgrade cni-plugins-debuginfoUpgrade golangUpgrade golang-srcUpgrade golang-raceUpgrade rcloneUpgrade amazon-ssm-agent-debuginfoUpgrade cri-toolsUpgrade golang-miscUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade docker | Apr 21, 2023 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golangUpgrade containerdUpgrade docker | Apr 21, 2023 | Feb 14, 2023 |
| Amazon_linux_2023 | — | Upgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade cni-plugins-debuginfoUpgrade docker-debugsourceUpgrade golang-raceUpgrade golang-srcUpgrade golang-miscUpgrade cni-plugins-debugsourceUpgrade docker-debuginfoUpgrade golang-binUpgrade ecs-initUpgrade dockerUpgrade amazon-ssm-agent-debugsourceUpgrade cni-pluginsUpgrade amazon-ssm-agent-debuginfoUpgrade nerdctlUpgrade golang-docsUpgrade golang-testsUpgrade golang | Feb 17, 2025 | Feb 17, 2023 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade crunUpgrade buildah-testsUpgrade podman-dockerUpgrade rhc-debugsourceUpgrade conmonUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade rhc-debuginfoUpgrade golang-raceUpgrade container-selinuxUpgrade buildahUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-toolsetUpgrade python3-podmanUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade criu-develUpgrade buildah-debugsourceUpgrade udicaUpgrade rhcUpgrade podman-pluginsUpgrade golang-binUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade runc-debuginfoUpgrade golang-miscUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade criu-libsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade golang-srcUpgrade golangUpgrade delveUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade toolbox-debuginfoUpgrade toolboxUpgrade runcUpgrade podman-remoteUpgrade podman-catatonitUpgrade golang-docsUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade skopeoUpgrade python3-criuUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade critUpgrade containers-common | Oct 25, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade golang-1.19Upgrade golang-golang-x-net | Jul 30, 2024 | Feb 28, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Feb 17, 2023 | Feb 15, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engineUpgrade docker-engine-selinux | May 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | May 31, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Mar 13, 2024 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade skopeoUpgrade buildah-testsUpgrade python3-podmanUpgrade podmanUpgrade netavarkUpgrade conmonUpgrade udicaUpgrade aardvark-dnsUpgrade criuUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade buildahUpgrade runcUpgrade podman-testsUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade containers-commonUpgrade skopeo-testsUpgrade crunUpgrade criu-develUpgrade python3-criuUpgrade container-selinuxUpgrade podman-pluginsUpgrade libslirpUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade libslirp-devel | Nov 16, 2023 | Feb 17, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podman | May 19, 2023 | Feb 17, 2023 |
| Redhat_linux | — | Upgrade skopeoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade golang-testsUpgrade libslirp-debugsourceUpgrade toolboxUpgrade crunUpgrade golang-docsUpgrade criuUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade golang-binUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade podman-remoteUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade rhc-debuginfoUpgrade podmanUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade netavarkUpgrade udicaUpgrade podman-dockerUpgrade podman-debuginfoUpgrade criu-libs-debuginfoNo solution existsUpgrade podman-catatonitUpgrade runcUpgrade critUpgrade aardvark-dnsUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade containers-commonUpgrade golang-raceUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade delve-debuginfoUpgrade criu-libsUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade delveUpgrade golang-miscUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade buildah-testsUpgrade go-toolsetUpgrade rhc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade rhcUpgrade golangUpgrade golang-srcUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmonUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade python3-podmanUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsource | Oct 25, 2023 | Feb 28, 2023 |
| Rocky_linux | — | Upgrade buildah-testsUpgrade crun-debugsourceUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade critUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade podman-remoteUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade libslirpUpgrade podmanUpgrade slirp4netnsUpgrade conmonUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade podman-pluginsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-raceUpgrade helm-zsh-completionUpgrade helm-fish-completionUpgrade go1.18Upgrade spacecmdUpgrade go1.18-openssl-docUpgrade go1.20Upgrade golang-github-prometheus-node_exporterUpgrade prometheus-blackbox_exporterUpgrade supportutils-plugin-saltUpgrade go1.19-docUpgrade golang-github-lusitaniae-apache_exporterUpgrade go1.19Upgrade firewalld-prometheus-configUpgrade helmUpgrade dracut-saltbootUpgrade helm-bash-completionUpgrade go1.20-raceUpgrade go1.18-openssl-raceUpgrade golang-github-prometheus-prometheusUpgrade go1.18-docUpgrade go1.20-docUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade grafanaUpgrade prometheus-postgres_exporterUpgrade container-suseconnectUpgrade supportutils-plugin-susemanager-clientUpgrade golang-github-qubitproducts-exporter_exporter | Mar 15, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.17Upgrade golang-1.18-srcUpgrade golang-1.17-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-go | Nov 15, 2024 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub