Red Hat Security Advisory

RHSA-2019:3906

OpenShift Container Platform 3.11 HTTP/2 security update

Released 2019-11-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 atomic-enterprise-service-catalog-1:3.11.154-1.git.1.fa68ced.el7, atomic-enterprise-service-catalog-svcat-1:3.11.154-1.git.1.fa68ced.el7, atomic-openshift-cluster-autoscaler-3.11.154-1.git.1.532da7a.el7 +32

TI-2019-06949 CVE-2019-9514 · GHSA-39qc-96h7-956f

HIGH 74

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.82813 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-06947 CVE-2019-9512 · GHSA-hgr8-6h9x-f7q9

HIGH 74

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83433 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400