CVE-2019-9512

CVSS 3.1: 7.5 high
EPSS: 83%p100
Published: Aug 13, 2019 · Aug 13, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-9512 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

Vendors: apple apache debian nodejs

Products: swiftnio, traffic server, debian linux, node.js

Weakness: CWE-400

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (83.4%)

In the news

3 stories

Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosAug 13, 17:56 UTC · Aug 13, 2019VulnerabilityExploitedCVE-2019-1181 CVE-2019-1182 CVE-2019-1200+93

8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2019VulnerabilityCVE-2019-9511 CVE-2019-9512 CVE-2019-9513+52 · 1 read

Flaws in HTTP/2 implementations expose servers to DoS attacks

Security AffairsAug 14, 16:35 UTC · Aug 14, 2019VulnerabilityCVE-2019-9518 CVE-2019-9511 CVE-2019-9512+52