https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T15:23:13.576319+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-9518 CVE-2019-9518 — Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service 2026-10-12T15:23:13.578558+00:00

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU.

 https://cve.radiocsirt.org/vuln/usn-4866-1 USN-4866-1 — netty vulnerabilities 2026-10-12T15:23:13.578604+00:00

Affected: Ubuntu:Pro:18.04:LTS: netty

It was discovered that Netty incorrectly implements HTTP/2. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-9512, CVE-2019-9514, CVE-2019-9515, CVE-2019-9518)