Lucene search

CVE-2019-9515

🗓️ 13 Aug 2019 21:12:15Reported by [email protected]Type

HTTP/2 vulnerability settings flood leading to denial of servic

Reporter	Title	Published	Views	Family All 195
F5 Networks	K50233772 : HTTP/2 Settings Flood vulnerability CVE-2019-9515	20 Aug 201900:00	–	f5
OSV	CVE-2019-9515	13 Aug 201921:15	–	osv
OSV	HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods	14 Mar 202222:45	–	osv
OSV	Red Hat Security Advisory: skydive security update	20 Sep 202413:54	–	osv
OSV	h2o - security update	24 Aug 201900:00	–	osv
OSV	netty vulnerabilities	29 Jun 202119:18	–	osv
OSV	trafficserver - security update	9 Sep 201900:00	–	osv
OSV	Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 7	20 Sep 202413:55	–	osv
OSV	Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 8	20 Sep 202413:55	–	osv
OSV	Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 7 security update	20 Sep 202413:54	–	osv

Nvd

Node

apple swiftnioRange1.0.0–1.4.0

AND

apple mac_os_xRange10.12≥

canonical ubuntu_linuxRange14.04≥

Node

apache traffic_serverRange6.0.0–6.2.3

apache traffic_serverRange7.0.0–7.1.6

apache traffic_serverRange8.0.0–8.0.3

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

synology diskstation_managerMatch6.2

synology skynasMatch-

Node

synology vs960hd_firmwareMatch-

AND

synology vs960hdMatch-

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

Node

redhat jboss_core_servicesMatch1.0

redhat jboss_enterprise_application_platformMatch7.2.0

redhat jboss_enterprise_application_platformMatch7.3.0

redhat openshift_container_platformMatch4.1

redhat openshift_service_meshMatch1.0

redhat openstackMatch14

redhat quayMatch3.0.0

redhat single_sign-onMatch7.3

redhat software_collectionsMatch1.0

redhat enterprise_linuxMatch8.0

Node

oracle graalvmMatch19.2.0enterprise

Node

mcafee web_gatewayRange7.7.2.0–7.7.2.24

mcafee web_gatewayRange7.8.2.0–7.8.2.13

mcafee web_gatewayRange8.1.0–8.2.0

Node

f5 big-ip_local_traffic_managerRange11.6.1–11.6.5.1

f5 big-ip_local_traffic_managerRange12.1.0–12.1.5.1

f5 big-ip_local_traffic_managerRange13.1.0–13.1.3.2

f5 big-ip_local_traffic_managerRange14.0.0–14.0.1.1

f5 big-ip_local_traffic_managerRange14.1.0–14.1.2.1

f5 big-ip_local_traffic_managerRange15.0.0–15.0.1.1

Node

nodejs node.jsRange8.0.0–8.8.1-

nodejs node.jsRange8.9.0–8.16.1lts

nodejs node.jsRange10.0.0–10.12.0-

nodejs node.jsRange10.13.0–10.16.3lts

nodejs node.jsRange12.0.0–12.8.1-

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html
lists	www.lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3Cusers.trafficserver.apache.org%3E
access	www.access.redhat.com/errata/RHSA-2019:4042
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/
access	www.access.redhat.com/errata/RHSA-2019:2861
access	www.access.redhat.com/errata/RHSA-2019:4352
lists	www.lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3Cannounce.trafficserver.apache.org%3E
seclists	www.seclists.org/bugtraq/2019/Aug/43
lists	www.lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html
kb	www.kb.cert.org/vuls/id/605641/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Aug 2019 21:15Current

7.5High risk

Vulners AI Score7.5

CVSS27.8

CVSS37.5

EPSS0.049