https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:10:48 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:2925 <p><strong>Affected:</strong> AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging</p> <p>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.</p> <p>The following packages have been upgraded to a later upstream version: nodejs (10.16.3).</p> <p>Security Fix(es):</p> <p>* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)</p> <p>* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)</p> <p>* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)</p> <p>* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)</p> <p>* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)</p> <p>* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)</p> <p>* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)</p> <p>* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: nodejs-nodemon, AlmaLinux:8: nodejs-packaging</p> <p>Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.</p> <p>The following packages have been upgraded to a later upstream version: nodejs (10.16.3).</p> <p>Security Fix(es):</p> <p>* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)</p> <p>* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)</p> <p>* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)</p> <p>* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)</p> <p>* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)</p> <p>* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)</p> <p>* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)</p> <p>* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:2925 https://cve.radiocsirt.org/vuln/bdu:2019-03646 bdu:2019-03646 https://cve.radiocsirt.org/vuln/bdu:2019-03646 https://cve.radiocsirt.org/vuln/bell-cve-2019-9515 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-9515 https://cve.radiocsirt.org/vuln/certfr-2019-avi-388 certfr-2019-avi-388 https://cve.radiocsirt.org/vuln/certfr-2019-avi-388 https://cve.radiocsirt.org/vuln/cleanstart-2025-st85629 <p><strong>Affected:</strong> CleanStart: containerd</p> <p>Security vulnerability affects the containerd package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.</p> <p><strong>Affected:</strong> CleanStart: containerd</p> <p>Security vulnerability affects the containerd package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-st85629 https://cve.radiocsirt.org/vuln/euvd-2026-52939 EUVD-2026-52939 https://cve.radiocsirt.org/vuln/euvd-2026-52939 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9515 <p>Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.</p> <p>Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9515 https://cve.radiocsirt.org/vuln/ghsa-9259-5376-vjcj <p>Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.</p> <p>Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.</p> https://cve.radiocsirt.org/vuln/ghsa-9259-5376-vjcj https://cve.radiocsirt.org/vuln/gsd-2019-9515 gsd-2019-9515 https://cve.radiocsirt.org/vuln/gsd-2019-9515 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2114-1 <p>Security update for nodejs10</p> <p>Security update for nodejs10</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2114-1 https://cve.radiocsirt.org/vuln/rhsa-2019:2766 <p>HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth</p> <p>HTTP/2: flood using PING frames results in unbounded memory growth HTTP/2: flood using HEADERS frames results in unbounded memory growth HTTP/2: flood using SETTINGS frames results in unbounded memory growth</p> https://cve.radiocsirt.org/vuln/rhsa-2019:2766 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 <p>Security update for Mozilla Firefox</p> <p>Security update for Mozilla Firefox</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9515 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: golang-google-grpc, Ubuntu:16.04:LTS: grpc, Ubuntu:16.04:LTS: trafficserver, Ubuntu:18.04:LTS: twisted, Ubuntu:18.04:LTS: golang-google-grpc, Ubuntu:18.04:LTS: grpc, Ubuntu:Pro:18.04:LTS: h2o, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:18.04:LTS: trafficserver, Ubuntu:20.04:LTS: twisted and 10 more</p> <p>Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: golang-google-grpc, Ubuntu:16.04:LTS: grpc, Ubuntu:16.04:LTS: trafficserver, Ubuntu:18.04:LTS: twisted, Ubuntu:18.04:LTS: golang-google-grpc, Ubuntu:18.04:LTS: grpc, Ubuntu:Pro:18.04:LTS: h2o, Ubuntu:Pro:18.04:LTS: netty, Ubuntu:18.04:LTS: trafficserver, Ubuntu:20.04:LTS: twisted and 10 more</p> <p>Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9515 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0770