CVE:CVE-2019-9518
CNNVD:CNNVD-201908-940
HTTP/2是超文本传输协议的第二版，主要用于保证客户机与服务器之间的通信。
HTTP/2中存在资源管理错误漏洞。攻击者可利用该漏洞导致拒绝服务。
solution:Upgrade apple swiftnio to a higher version than 1.4.0,and avoid the version [1.0.0,1.4.0]; Upgrade apache traffic_server to a higher version than 6.2.3,7.1.6,8.0.3,and avoid the version [6.0.0,6.2.3],[7.0.0,7.1.6],[8.0.0,8.0.3]; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade synology diskstation_manager to a higher version than 6.2,and avoid the version 6.2; Upgrade synology skynas to a higher version than -; Upgrade synology vs960hd_firmware to a higher version than -; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade redhat jboss_core_services to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.2.0,7.3.0,and avoid the version 7.2.0,7.3.0; Upgrade redhat openshift_service_mesh to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat quay to a higher version than 3.0.0,and avoid the version 3.0.0; Upgrade redhat software_collections to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade oracle graalvm to a higher version than 19.2.0,and avoid the version 19.2.0; Upgrade mcafee web_gateway to a higher version than 7.7.2.24,7.8.2.13,8.2.0,and avoid the version [7.7.2.0,7.7.2.24),[7.8.2.0,7.8.2.13),[8.1.0,8.2.0); Upgrade nodejs node.js to a higher version than 8.8.1,8.16.1,10.12.0,10.16.3,12.8.1,and avoid the version [8.0.0,8.8.1],[8.9.0,8.16.1),[10.0.0,10.12.0],[10.13.0,10.16.3),[12.0.0,12.8.1)