● CVE — High
CVE-2019-9513
Vendorredhat, debian, fedoraproject, canonical, opensuseProductjboss enterprise application platform, debian linux, fedora, ubuntu linux, enterprise linux, leap, enterprise communications broker, traffic server, diskstation manager, skynas, vs960hd firmware, jboss core services, node.js, nginx, web gateway, swiftnio, software collections, openshift service mesh, graalvm, quayDiscoveredAug 13, 2019UpdatedJan 14, 2025
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.