Vulnerabilitymedium

Flaws in HTTP/2 implementations expose servers to DoS attacks

Security Affairsby @securityaffairsAug 14, 2019 · 16:35 UTC (Aug 14, 2019)2 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-9518 CVE-2019-9511 CVE-2019-9512 CVE-2019-9513 CVE-2019-9514 CVE-2019-9515 CVE-2019-9516 CVE-2017-9517

Tags: cve-2019-9518 cve-2019-9511 cve-2019-9512 cve-2019-9513 cve-2019-9514 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-9517	atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV	8.8	<1%		Jun 8, 2017
CVE-2019-9515 +6 related CVEs CVE-2019-9512 CVE-2019-9514 CVE-2019-9513 CVE-2019-9511 CVE-2019-9518 CVE-2019-9516	Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service	7.5 group max	87%		Aug 13, 2019

From the original article

2 min read at securityaffairs.com

Experts at Netflix and Google discovered eight denial-of-service (DoS) vulnerabilities affecting various HTTP/2 implementations. Researchers from Netflix and Google discovered eight denial-of-service (DoS) flaws affecting various HTTP/2 implementations. Some of the flawed implementations belong to tech giants such as Amazon, Apple, Facebook, and Microsoft.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.