CVE-2019-9514

ADVISORY - github

Summary

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. Servers that accept direct connections from untrusted clients could be remotely made to allocate an unlimited amount of memory, until the program crashes. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.

Specific Go Packages Affected

golang.org/x/net/http2

EPSS Score⁠: 0.08585 (0.919)

Common Weakness Enumeration (CWE)

ADVISORY - nist

Docker

CREATED

2 years ago

UPDATED

4 months ago

ADVISORY ID

BSA-2019-9514

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

NIST

CREATED

6 years ago

UPDATED

5 months ago

ADVISORY IDCVE-2019-9514⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-400⁠CWE-770⁠

CVSS SCORE

7.5high

GitHub

CREATED

3 years ago

UPDATED

1 year ago

ADVISORY IDGHSA-39qc-96h7-956f⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-400⁠CWE-770⁠

CVSS SCORE

7.5high

Alpine

CREATED

6 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2019-9514⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

6 years ago

UPDATED

1 month ago

ADVISORY IDCVE-2019-9514⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

6 years ago

UPDATED

25 days ago

ADVISORY IDCVE-2019-9514⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium

GoLang

CREATED

3 years ago

UPDATED

1 year ago

ADVISORY IDGO-2022-0536⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

RustSec

CREATED

1 year ago

UPDATED

1 year ago

ADVISORY IDRUSTSEC-2024-0003⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

GitLab

CREATED

3 years ago

UPDATED

2 years ago

ADVISORY ID

CVE-2019-9514

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-770⁠CWE-937⁠

CVSS SCORE

7.5high

Alma

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDALSA-2019:2925⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDALSA-2019:4269⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDALSA-2019:4273⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDALAS-2019-1270⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDALAS2-2019-1272⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Red Hat

CREATED

6 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2019-9514⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-400⁠

CVSS SCORE

7.5high

Rocky

CREATED

6 years ago

UPDATED

4 months ago

ADVISORY IDRLSA-2019:2925⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

6 years ago

UPDATED

4 months ago

ADVISORY IDRLSA-2019:4269⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

6 years ago

UPDATED

4 months ago

ADVISORY IDRLSA-2019:4273⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDELSA-2019-2726⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

6 years ago

UPDATED

6 years ago

ADVISORY IDELSA-2019-2925⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

5 years ago

UPDATED

5 years ago

ADVISORY IDELSA-2019-4269⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

5 years ago

UPDATED

5 years ago

ADVISORY IDELSA-2019-4273⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

1 year ago

UPDATED

1 year ago

ADVISORY ID

CGA-2q42-4xwv-8jw8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-hx5g-22g6-vxqp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY