Read the docs
Red Hat Security Advisory

RHSA-2023:7058

rhc security, bug fix, and enhancement update

Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 46

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04561 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 +1 CWE-400