HIGH✓ PATCH🇬🇧 English

CVE-2019-9514

CVSS 7.5v3.1pub. 2019-08-13upd. 2025-01-14

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Apache Traffic Server
APP
Apache
6.0.0 – 6.2.37.0.0 – 7.1.68.0.0 – 8.0.3
Apple Mac Os X
OS
Apple
≥ 10.12
Apple Swiftnio
APP
Apple
1.0.0 – 1.4.0
Canonical Ubuntu
OS
Canonical
16.0418.0419.04≥ 14.04
Debian
OS
Debian
10.09.0
F5 Big Ip Local Traffic Manager
APP
F5
14.0.0 – 14.0.1.1 (bez)13.1.0 – 13.1.3.2 (bez)11.6.1 – 11.6.5.1 (bez)15.0.0 – 15.0.1.1 (bez)14.1.0 – 14.1.2.1 (bez)12.1.0 – 12.1.5.1 (bez)
Fedora Project Fedora
OS
Fedoraproject
2930
Mcafee Web Gateway
APP
Mcafee
7.8.2.0 – 7.8.2.13 (bez)8.1.0 – 8.2.0 (bez)7.7.2.0 – 7.7.2.24 (bez)
Netapp Cloud Insights
APP
Netapp
wszystkie wersje
Netapp Trident
APP
Netapp
wszystkie wersje
Node.js
APP
Nodejs
12.0.0 – 12.8.1 (bez)10.13.0 – 10.16.3 (bez)10.0.0 – 10.12.08.9.0 – 8.16.1 (bez)8.0.0 – 8.8.1
Opensuse Leap
OS
Opensuse
15.015.1
Oracle Graalvm
APP
Oracle
19.2.0
Red Hat Developer Tools
APP
Redhat
1.0
Red Hat Enterprise Linux
OS
Redhat
8.0
Red Hat Enterprise Linux Eus
OS
Redhat
8.1
Red Hat Enterprise Linux Server
OS
Redhat
7.0
Red Hat Enterprise Linux Workstation
OS
Redhat
7.0
Red Hat Jboss Core Services
APP
Redhat
1.0
Red Hat Jboss Enterprise Application Platform
APP
Redhat
7.2.07.3.0
Red Hat OpenShift Container Platform
APP
Redhat
3.103.113.94.14.2
Red Hat Openshift Service Mesh
APP
Redhat
1.0
Red Hat Openstack
APP
Redhat
14
Red Hat Quay
APP
Redhat
3.0.0
Red Hat Single Sign On
APP
Redhat
7.3
Red Hat Software Collections
APP
Redhat
1.0
Synology Diskstation Manager
OS
Synology
6.2
Synology Skynas
APP
Synology
wszystkie wersje
Synology Vs960hd
HW
Synology
wszystkie wersje
Synology Vs960hd Firmware
OS
Synology
wszystkie wersje