Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2019/10/04 12:0 a.m.63 views

Amazon Linux AMI : nghttp2 (ALAS-2019-1298) (Data Dribble) (Resource Loop)

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority ...

7.8CVSS7.8AI score0.13725EPSS
Exploits0References3
OSV
OSV
added 2019/08/13 9:15 p.m.26 views

CVE-2019-9513

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU...

7.5CVSS6.9AI score
Exploits0References42
NVD
NVD
added 2019/08/13 9:15 p.m.17 views

CVE-2019-9513

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU...

7.8CVSS7.5AI score0.06587EPSS
Exploits0References42
OSV
OSV
added 2019/08/13 9:15 p.m.1 views

ALPINE-CVE-2019-9513

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU...

7.5CVSS8.9AI score0.06587EPSS
Exploits0References1
Prion
Prion
added 2019/08/13 9:15 p.m.72 views

Design/Logic Flaw

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU...

7.8CVSS7.4AI score0.06587EPSS
Exploits0References42Affected Software18
AlpineLinux
AlpineLinux
added 2019/08/13 8:50 p.m.36 views

CVE-2019-9513

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU...

7.8CVSS7.9AI score0.06587EPSS
Exploits0
Rows per page
Query Builder