When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rcloneUpgrade go | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade nerdctlUpgrade amazon-ssm-agentUpgrade golang-docsUpgrade runcUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade cni-pluginsUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade rclone-debuginfoUpgrade golang-sharedUpgrade containerdUpgrade golist-debuginfoUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade soci-snapshotterUpgrade oci-add-hooksUpgrade golang-binUpgrade golang-miscUpgrade amazon-ecr-credential-helper-debuginfoUpgrade rcloneUpgrade nerdctl-debuginfoUpgrade golang-testsUpgrade cri-tools-debuginfoUpgrade runfinch-finchUpgrade dockerUpgrade golistUpgrade golang-srcUpgrade golangUpgrade cri-tools | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade runc-debugsourceUpgrade yq-debuginfoUpgrade docker-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade rcloneUpgrade golang-testsUpgrade golangUpgrade soci-snapshotterUpgrade runcUpgrade runfinch-finchUpgrade dockerUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade yq-debugsourceUpgrade credentials-fetcherUpgrade amazon-ssm-agentUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade ecs-initUpgrade yqUpgrade golang-sharedUpgrade containerdUpgrade containerd-debugsourceUpgrade golistUpgrade containerd-stress-debuginfoUpgrade containerd-stressUpgrade rclone-debugsourceUpgrade oci-add-hooksUpgrade docker-debuginfoUpgrade golist-debugsourceUpgrade amazon-ecr-credential-helperUpgrade rclone-debuginfoUpgrade containerd-debuginfoUpgrade golang-docsUpgrade oci-add-hooks-debuginfoUpgrade nerdctl | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-srcUpgrade delveUpgrade go-toolsetUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-docsUpgrade golang-bin | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade ose-crio-credential-providerUpgrade microshift | Aug 27, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade delveUpgrade golang-docsUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-race | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade golang-binUpgrade delve-debugsourceUpgrade golangUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang-raceUpgrade delve | Aug 27, 2026 | Aug 26, 2026 |
| Ubuntu | — | Upgrade golang-github-docker-containerd-dev (Ubuntu Pro)Upgrade containerd (Ubuntu Pro)Upgrade adsys (Ubuntu Pro)Upgrade containerdUpgrade containerd-stableUpgrade golang-github-containerd-containerd-api-dev (Ubuntu Pro)Upgrade adsysUpgrade golang-github-containerd-containerd-dev (Ubuntu Pro)Upgrade golang-github-containerd-containerd-dev | Jun 16, 2026 | Jun 15, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub