TI-2025-07937 Aliases CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2…

HIGH 72CWE-404Published 2025-08-13 · Updated 2025-11-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-404.

Summary

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.03637 89th percentileScored 2026-11-07

Fix Fixed Enterprise Module for Development Tools (SUSE Linux): 15-SP5Enterprise High Performance Computing (HPC) (SUSE Linux): 15 SP5+6 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SUSE	Enterprise Module for Development Tools	15 SP2 to before 15-SP5	15-SP5	Patch available	CNA
SUSE	Enterprise High Performance Computing (HPC)	15 to before 15 SP5	15 SP5	Patch available	CNA
varnish-software	Varnish Enterprise	6.0.x – 6.0.14r4	—	No fix listed	CNA
varnish-software	Varnish Cache	6.0LTS – 6.014	—	No fix listed	CNA
varnish-software	Varnish Cache	5.x – 7.71	—	No fix listed	CNA
Fastly	H20	579ecfa	—	No fix listed	CNA
Wind River	Linux	LTS22 – TLS25	—	No fix listed	CNA
SUSE	Enterprise Desktop	15 SP6 to before 15 SP7	15 SP7	Patch available	CNA
SUSE	Enterprise High Performance Computing	15 SP3 to before 15 SP7	15 SP7	Patch available	CNA
SUSE	Enterprise Module for Dev Tools	15 SP3 to before 15 SP7	15 SP7	Patch available	CNA
SUSE	Enterprise Module for Package Hub	15 SP5 to before 15 SP7	15 SP7	Patch available	CNA
SUSE	Enterprise Server	12 SP5 to before 15 SP7	15 SP7	Patch available	CNA
SUSE	Enterprise Server for SAP Applications	15 SP6 to before 15 SP7	15 SP7	Patch available	CNA
SUSE	SUSE Manager Server	4.3	—	No fix listed	CNA
SUSE	SUSE Manager Server LTS	4.3	—	No fix listed	CNA
SUSE	SUSE Manager Proxy	4.3	—	No fix listed	CNA
SUSE	SUSE Manager Retail Branch Server	4.3	—	No fix listed	CNA
SUSE	openSUSE Leap	15.6	—	No fix listed	CNA

Enterprise Module for Development Tools VendorSUSE Affected 15 SP2 to before 15-SP5 Fixed in 15-SP5 Patch available CNA
Enterprise High Performance Computing (HPC) VendorSUSE Affected 15 to before 15 SP5 Fixed in 15 SP5 Patch available CNA
Varnish Enterprise Vendorvarnish-software Affected 6.0.x – 6.0.14r4 Fixed in — No fix listed CNA
Varnish Cache Vendorvarnish-software Affected 6.0LTS – 6.014 Fixed in — No fix listed CNA
Varnish Cache Vendorvarnish-software Affected 5.x – 7.71 Fixed in — No fix listed CNA
H20 VendorFastly Affected 579ecfa Fixed in — No fix listed CNA
Linux VendorWind River Affected LTS22 – TLS25 Fixed in — No fix listed CNA
Enterprise Desktop VendorSUSE Affected 15 SP6 to before 15 SP7 Fixed in 15 SP7 Patch available CNA
Enterprise High Performance Computing VendorSUSE Affected 15 SP3 to before 15 SP7 Fixed in 15 SP7 Patch available CNA
Enterprise Module for Dev Tools VendorSUSE Affected 15 SP3 to before 15 SP7 Fixed in 15 SP7 Patch available CNA
Enterprise Module for Package Hub VendorSUSE Affected 15 SP5 to before 15 SP7 Fixed in 15 SP7 Patch available CNA
Enterprise Server VendorSUSE Affected 12 SP5 to before 15 SP7 Fixed in 15 SP7 Patch available CNA
Enterprise Server for SAP Applications VendorSUSE Affected 15 SP6 to before 15 SP7 Fixed in 15 SP7 Patch available CNA
SUSE Manager Server VendorSUSE Affected 4.3 Fixed in — No fix listed CNA
SUSE Manager Server LTS VendorSUSE Affected 4.3 Fixed in — No fix listed CNA
SUSE Manager Proxy VendorSUSE Affected 4.3 Fixed in — No fix listed CNA
SUSE Manager Retail Branch Server VendorSUSE Affected 4.3 Fixed in — No fix listed CNA
openSUSE Leap VendorSUSE Affected 15.6 Fixed in — No fix listed CNA

Remediation

Fix · CNA Enterprise Module for Development Tools (SUSE Linux) Fixed in 15-SP5
Fix · CNA Enterprise High Performance Computing (HPC) (SUSE Linux) Fixed in 15 SP5
Fix · CNA Enterprise Desktop (SUSE Linux) Fixed in 15 SP7
Fix · CNA Enterprise High Performance Computing (SUSE Linux) Fixed in 15 SP7
Fix · CNA Enterprise Module for Dev Tools (SUSE Linux) Fixed in 15 SP7
Fix · CNA Enterprise Module for Package Hub (SUSE Linux) Fixed in 15 SP7
Fix · CNA Enterprise Server (SUSE Linux) Fixed in 15 SP7
Fix · CNA Enterprise Server for SAP Applications (SUSE Linux) Fixed in 15 SP7

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2025-8671

References

Other 9

TI-2016-03560 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… KEVCVSS 3.1CRITICAL 9.8
TI-2016-03506 Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… KEVCVSS 3.1CRITICAL 9.8
TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
TI-2015-04302 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
TI-2015-04301 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8
TI-2015-04298 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… KEVCVSS 3.1CRITICAL 9.8

See all 1331 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences