cve.bz

CVE-2019-9512

7.5 highEPSS 83%

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
83% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE
CWE-400
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-39qc-96h7-956fGogolang.org/x/net<0.0.0-20190813141303-74dc4d7220e70.0.0-20190813141303-74dc4d7220e7
GHSA-hgr8-6h9x-f7q9Gogolang.org/x/net<0.0.0-20190813141303-74dc4d7220e70.0.0-20190813141303-74dc4d7220e7
GO-2022-0536Gostdlib<1.11.13
>=1.12.0-0 <1.12.8		1.11.13, 1.12.8
GO-2022-0536Gogolang.org/x/net<0.0.0-20190813141303-74dc4d7220e70.0.0-20190813141303-74dc4d7220e7

References

Check your stackJSON