https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:45:53.040322+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03248 bdu:2023-03248 2026-10-03T08:45:53.349993+00:00 bdu:2023-03248 https://cve.radiocsirt.org/vuln/euvd-2026-214628 EUVD-2026-214628 2026-10-03T08:45:53.350036+00:00 EUVD-2026-214628 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26964 fkie_cve-2023-26964 2026-10-03T08:45:53.350051+00:00

An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/ghsa-f8vr-r385-rh5r GHSA-f8vr-r385-rh5r — h2 vulnerable to denial of service 2026-10-03T08:45:53.350082+00:00

Affected: crates.io: h2

Hyper is an HTTP library for Rust and h2 is an HTTP 2.0 client & server implementation for Rust. An issue was discovered in h2 v0.2.4 when processing header frames. It incorrectly processes the HTTP2 `RST_STREAM` frames by not always releasing the memory immediately upon receiving the reset frame, leading to stream stacking. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).

This issue affects users only when dealing with http2 connections.

 https://cve.radiocsirt.org/vuln/gsd-2023-26964 gsd-2023-26964 2026-10-03T08:45:53.350112+00:00 gsd-2023-26964 https://cve.radiocsirt.org/vuln/msrc_cve-2023-26964 msrc_CVE-2023-26964 — An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STR… 2026-10-03T08:45:53.350124+00:00 msrc_CVE-2023-26964 https://cve.radiocsirt.org/vuln/opensuse-su-2024:0294-1 openSUSE-SU-2024:0294-1 — Security update for kanidm 2026-10-03T08:45:53.350142+00:00

Security update for kanidm

 https://cve.radiocsirt.org/vuln/rustsec-2023-0034 RUSTSEC-2023-0034 — Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS) 2026-10-03T08:45:53.350160+00:00

Affected: crates.io: h2

If an attacker is able to flood the network with pairs of `HEADERS`/`RST_STREAM` frames, such that the `h2` application is not able to accept them faster than the bytes are received, the pending accept queue can grow in memory usage. Being able to do this consistently can result in excessive memory use, and eventually trigger Out Of Memory.

This flaw is corrected in [hyperium/h2#668](https://github.com/hyperium/h2/pull/668), which restricts remote reset stream count by default.

 https://cve.radiocsirt.org/vuln/suse-su-2025:02809-1 SUSE-SU-2025:02809-1 — Security update for rust-keylime 2026-10-03T08:45:53.350182+00:00

Security update for rust-keylime

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26964 UBUNTU-CVE-2023-26964 2026-10-03T08:45:53.350199+00:00

Affected: Ubuntu:20.04:LTS: rust-hyper, Ubuntu:24.04:LTS: rust-hyper, Ubuntu:25.10: rust-hyper, Ubuntu:26.04:LTS: rust-hyper

An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).