Security Advisory

CVE-2019-9512

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-08-13 20:50:59

Last updated 2024-08-04 21:54:44

Assigner certcc

CVSS score 7.5

State PUBLISHED

Description

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

← Browse all CVEs View on cve.org ↗