A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Enterprise Module for Development Tools
Vendor
SUSE Linux
Product
Enterprise Module for Development Tools
Platforms
Unknown
Default status
Unknown
Enterprise Module for Development Tools · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15 SP2
affected
custom
15-SP5
Unavailable
None listed
Enterprise High Performance Computing (HPC)
Vendor
SUSE Linux
Product
Enterprise High Performance Computing (HPC)
Platforms
Unknown
Default status
Unknown
Enterprise High Performance Computing (HPC) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15
affected
custom
15 SP5
Unavailable
None listed
Varnish Enterprise
Vendor
Varnish Software
Product
Varnish Enterprise
Platforms
Unknown
Default status
Unknown
Varnish Enterprise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0.x
affected
custom
Unavailable
6.0.14r4
None listed
Varnish Cache
Vendor
Varnish Software
Product
Varnish Cache
Platforms
Unknown
Default status
Unknown
Varnish Cache · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0LTS
affected
custom
Unavailable
6.014
None listed
Varnish Cache
Vendor
Varnish Software
Product
Varnish Cache
Platforms
Unknown
Default status
Unknown
Varnish Cache · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x
affected
custom
Unavailable
7.71
None listed
H20
Vendor
Fastly
Product
H20
Platforms
Unknown
Default status
Unknown
H20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
579ecfa
affected
Unavailable
Unavailable
Unavailable
None listed
Linux
Vendor
Wind River
Product
Linux
Platforms
Unknown
Default status
Unknown
Linux · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
LTS22
affected
custom
Unavailable
TLS25
None listed
Enterprise Desktop
Vendor
SUSE Linux
Product
Enterprise Desktop
Platforms
Unknown
Default status
Unknown
Enterprise Desktop · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15 SP6
affected
custom
15 SP7
Unavailable
None listed
Enterprise High Performance Computing
Vendor
SUSE Linux
Product
Enterprise High Performance Computing
Platforms
Unknown
Default status
Unknown
Enterprise High Performance Computing · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15 SP3
affected
custom
15 SP7
Unavailable
None listed
Enterprise Module for Dev Tools
Vendor
SUSE Linux
Product
Enterprise Module for Dev Tools
Platforms
Unknown
Default status
Unknown
Enterprise Module for Dev Tools · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15 SP3
affected
custom
15 SP7
Unavailable
None listed
Enterprise Module for Package Hub
Vendor
SUSE Linux
Product
Enterprise Module for Package Hub
Platforms
Unknown
Default status
Unknown
Enterprise Module for Package Hub · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15 SP5
affected
custom
15 SP7
Unavailable
None listed
Enterprise Server
Vendor
SUSE Linux
Product
Enterprise Server
Platforms
Unknown
Default status
Unknown
Enterprise Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
12 SP5
affected
custom
15 SP7
Unavailable
None listed
Enterprise Server for SAP Applications
Vendor
SUSE Linux
Product
Enterprise Server for SAP Applications
Platforms
Unknown
Default status
Unknown
Enterprise Server for SAP Applications · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
15 SP6
affected
custom
15 SP7
Unavailable
None listed
SUSE Manager Server
Vendor
SUSE Linux
Product
SUSE Manager Server
Platforms
Unknown
Default status
Unknown
SUSE Manager Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.3
affected
Unavailable
Unavailable
Unavailable
None listed
SUSE Manager Server LTS
Vendor
SUSE Linux
Product
SUSE Manager Server LTS
Platforms
Unknown
Default status
Unknown
SUSE Manager Server LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.3
affected
Unavailable
Unavailable
Unavailable
None listed
SUSE Manager Proxy
Vendor
SUSE Linux
Product
SUSE Manager Proxy
Platforms
Unknown
Default status
Unknown
SUSE Manager Proxy · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.3
affected
Unavailable
Unavailable
Unavailable
None listed
SUSE Manager Retail Branch Server
Vendor
SUSE Linux
Product
SUSE Manager Retail Branch Server
Platforms
Unknown
Default status
Unknown
SUSE Manager Retail Branch Server · Scoped product and version facts