[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

HTTP/2 Server Denial of Service Vulnerability - CVE-2019-9514

ID: oval:org.secpod.oval:def:57874Date: (C)2019-08-14   (M)2024-03-06
Class: VULNERABILITYFamily: windows




A denial of service vulnerability exists in the HTTP/2 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. To exploit this vulnerability, an unauthenticated attacker could send a specially crafted HTTP packet to a target system, causing the affected system to become nonresponsive. The update addresses the vulnerability by modifying how the Windows HTTP protocol stack handles HTTP/2 requests. Note that the denial of service vulnerability would not allow an attacker to execute code or to elevate user rights.

Platform:
Microsoft Windows Server
Microsoft Windows 10
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Reference:
CVE-2019-9514
CVE    1
CVE-2019-9514
CPE    23
cpe:/o:microsoft:windows_10
cpe:/o:microsoft:windows_server_2016:::x64
cpe:/o:microsoft:windows_10:1607:::x64
cpe:/o:microsoft:windows_10:1607:::x86
...

© SecPod Technologies