Lucene search

CVE-2019-9513

🗓️ 13 Aug 2019 21:12:15Reported by certccType

cve🔗 web.nvd.nist.gov👁 5591 Views🌐 4 Media mentions

Some HTTP/2 implementations vulnerable to resource loops causing denial of service

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	Synology DSM HTTP/2 Implementations Uncontrolled Resource Consumption (CVE-2019-9513)	1 Oct 202400:00	–	nessus
Tenable Nessus	Photon OS 4.0: Nghttp2 PHSA-2023-4.0-0379	23 Jul 202400:00	–	nessus
Tenable Nessus	Fedora 30 : nghttp2 (2019-81985a8858) (Data Dribble) (Resource Loop)	23 Aug 201900:00	–	nessus
Tenable Nessus	Photon OS 4.0: Nginx PHSA-2023-4.0-0342	23 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Red Hat OpenShift Service Mesh 1.0.1 RPMs (Important) (RHSA-2019:3041)	16 Oct 201900:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : nghttp2 (SUSE-SU-2019:2473-1) (Data Dribble) (Resource Loop)	27 Sep 201900:00	–	nessus
Tenable Nessus	Fedora 29 : nghttp2 (2019-8a437d5c2f) (Data Dribble) (Resource Loop)	28 Aug 201900:00	–	nessus
Tenable Nessus	Oracle Linux 8 : nghttp2 (ELSA-2019-2692)	11 Sep 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : nghttp2 (openSUSE-2019-2232) (Data Dribble) (Resource Loop)	2 Oct 201900:00	–	nessus
Tenable Nessus	FreeBSD : nghttp2 -- multiple vulnerabilities (121fec01-c042-11e9-a73f-b36f5969f162) (Data Dribble) (Resource Loop)	20 Aug 201900:00	–	nessus

Nvd

Node

apple swiftnioRange1.0.0–1.4.0

AND

apple mac_os_xRange10.12≥

canonical ubuntu_linuxRange14.04≥

Node

apache traffic_serverRange6.0.0–6.2.3

apache traffic_serverRange7.0.0–7.1.6

apache traffic_serverRange8.0.0–8.0.3

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

fedoraproject fedoraMatch30

Node

synology diskstation_managerMatch6.2

synology skynasMatch-

Node

synology vs960hd_firmwareMatch-

AND

synology vs960hdMatch-

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

Node

redhat jboss_core_servicesMatch1.0

redhat jboss_enterprise_application_platformMatch7.2.0

redhat jboss_enterprise_application_platformMatch7.3.0

redhat openshift_service_meshMatch1.0

redhat quayMatch3.0.0

redhat software_collectionsMatch1.0

redhat enterprise_linuxMatch8.0

Node

oracle graalvmMatch19.2.0enterprise

Node

mcafee web_gatewayRange7.7.2.0–7.7.2.24

mcafee web_gatewayRange7.8.2.0–7.8.2.13

mcafee web_gatewayRange8.1.0–8.2.0

Node

f5 nginxRange1.9.5–1.16.1

f5 nginxRange1.17.0–1.17.2

Node

oracle enterprise_communications_brokerMatch3.1.0

oracle enterprise_communications_brokerMatch3.2.0

Node

nodejs node.jsRange8.0.0–8.8.1-

nodejs node.jsRange8.9.0–8.16.1lts

nodejs node.jsRange10.0.0–10.12.0-

nodejs node.jsRange10.13.0–10.16.3lts

nodejs node.jsRange12.0.0–12.8.1-

Source	Link
security	www.security.netapp.com/advisory/ntap-20190823-0002/
access	www.access.redhat.com/errata/RHSA-2019:2966
lists	www.lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html
seclists	www.seclists.org/bugtraq/2019/Aug/40
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/
access	www.access.redhat.com/errata/RHSA-2019:2746
access	www.access.redhat.com/errata/RHSA-2019:2775
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/
kc	www.kc.mcafee.com/corporate/index
debian	www.debian.org/security/2019/dsa-4511

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Aug 2019 21:15Current

7.6High risk

Vulners AI Score7.6

CVSS27.8

CVSS37.5

EPSS0.053

CWE-400