Sign-up

ID

VAR-201908-0422


CVE

CVE-2019-9512


TITLE

HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion

Trust: 0.8

sources: CERT/CC: VU#605641

DESCRIPTION

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. Multiple HTTP/2 implementations are vulnerable to a variety of denial-of-service (DoS) attacks. Apple SwiftNI , Apache Traffic Server , Debian GNU/Linux Used in HTTP/2 Contains a resource exhaustion vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. HTTP/2 is the second version of the hypertext transfer protocol, which is mainly used to ensure the communication between the client and the server. A resource management error vulnerability exists in HTTP/2. An attacker could exploit this vulnerability to cause a denial of service. Description: Red Hat Decision Manager is an open source decision management platform that combines business rules management, complex event processing, Decision Model & Notation (DMN) execution, and Business Optimizer for solving planning problems. It automates business decisions and makes that logic available to the entire business. All OpenShift Container Platform 3.10 users are advised to upgrade to these updated packages and images. Solution: For OpenShift Container Platform 3.10 see the following documentation, which will be updated shortly for release 3.10.170, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_r elease_notes.html 5. Description: Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. See the Red Hat JBoss Enterprise Application Platform 7.2.5 Release Notes for information about the most significant bug fixes and enhancements included in this release. The References section of this erratum contains a download link (you must log in to download the update). The JBoss server process must be restarted for the update to take effect. JIRA issues fixed (https://issues.jboss.org/): JBEAP-17075 - (7.2.z) Upgrade yasson from 1.0.2.redhat-00001 to 1.0.5 JBEAP-17220 - (7.2.x) HHH-13504 Upgrade ByteBuddy to 1.9.11 JBEAP-17365 - [GSS](7.2.z) Upgrade RESTEasy from 3.6.1.SP6 to 3.6.1.SP7 JBEAP-17476 - [GSS](7.2.z) Upgrade Generic JMS RA 2.0.2.Final JBEAP-17478 - [GSS](7.2.z) Upgrade JBoss Remoting from 5.0.14.SP1 to 5.0.16.Final JBEAP-17483 - [GSS](7.2.z) Upgrade Apache CXF from 3.2.9 to 3.2.10 JBEAP-17495 - (7.2.z) Upgrade PicketLink from 2.5.5.SP12-redhat-00007 to 2.5.5.SP12-redhat-00009 JBEAP-17496 - (7.2.z) Upgrade PicketLink bindings from 2.5.5.SP12-redhat-00007 to 2.5.5.SP12-redhat-00009 JBEAP-17513 - [GSS](7.2.z) Upgrade Hibernate ORM from 5.3.11.SP1 to 5.3.13 JBEAP-17521 - (7.2.z) Upgrade picketbox from 5.0.3.Final-redhat-00004 to 5.0.3.Final-redhat-00005 JBEAP-17523 - [GSS](7.2.z) Upgrade wildfly-core from 6.0.16 to 6.0.17 JBEAP-17547 - [GSS](7.2.z) Upgrade Elytron-Tool from 1.4.3 to 1.4.4.Final JBEAP-17548 - [GSS](7.2.z) Upgrade Elytron from 1.6.4.Final-redhat-00001 to 1.6.5.Final-redhat-00001 JBEAP-17560 - [GSS](7.2.z) Upgrade HAL from 3.0.16 to 3.0.17 JBEAP-17579 - [GSS](7.2.z) Upgrade JBoss MSC from 1.4.8 to 1.4.11 JBEAP-17582 - [GSS](7.2.z) Upgrade JSF based on Mojarra 2.3.5.SP3-redhat-00002 to 2.3.5.SP3-redhat-00003 JBEAP-17631 - [GSS](7.2.z) Upgrade Undertow from 2.0.25.SP1 to 2.0.26.SP3 JBEAP-17647 - [GSS](7.2.z) Upgrade IronJacamar from 1.4.17.Final to 1.4.18.Final JBEAP-17665 - [GSS](7.2.z) Upgrade XNIO from 3.7.3.Final-redhat-00001 to 3.7.6.Final JBEAP-17722 - [GSS](7.2.z) Upgrade wildfly-http-client from 1.0.15.Final-redhat-00001 to 1.0.17.Final JBEAP-17874 - (7.2.z) Upgrade to wildfly-openssl 1.0.8 JBEAP-17880 - (7.2.z) Upgrade XNIO from 3.7.6.Final-redhat-00001 to 3.7.6.SP1 6. The fixes are too intrusive to backport to the version in the oldstable distribution (stretch). An upgrade to Debian stable (buster) is recommended instead. For the stable distribution (buster), these problems have been fixed in version 8.0.2+ds-1+deb10u1. We recommend that you upgrade your trafficserver packages. For the detailed security status of trafficserver please refer to its security tracker page at: https://security-tracker.debian.org/tracker/trafficserver Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl12uUMACgkQEMKTtsN8 TjbP/Q//UvaJG0Gts7+yZcOmkiaVinEtOzN445QNHGGQMKPfR4/hCuY6TrO0aWUM msNVTMwiEgLtXBqjNC2mT7f1UzQjZ76wb7wXAayaTsUsidMqsL9ZkVpzGSLrMBur wrhUpJRbDp/29qBdETP5bpjAp/Q7HMN1d9WbJa1ao2UpG1J2zpB8jQP0UjfVuM8W JwDlgj+Oj7M4CuQgN1A4vtK62f5k8X+d4bZZZSNUqkHKJuNFB1STDrDuZ+5aCPGo h0PYB/NX21T3W6AfGHIRwJda4IsSqRI/UnNIQygRs2QRiSzkGInCmb5KjsXKAiqF SnYLqKlxAcQ/8+zsEUqQKziBrZX6QsIiKFDYRV29KoK3AwDm7s5Q4KHzXGtNX5Mp a0GzAccDa1GpTxzSI8u5Jo60Ygf2ETkpwiyWSUivcFnzASyDCAwNLAwPAWpfARhO 2rE+LIi42dGnGfa2plKt7jvQDBj2hBvRHd8nMT8ugoJCTQCNnHC9X5/RNWPqIZmR XVHQSRTR8BCCnTdRuvXJB3oQyRQZORMqrsYoARm50+J/v2wJ/Q8Wo4kwWXpflDoH SAO10qjWU9Ja5giiQJh9ToJKPfx6sAma77XoaBz0HteCs3uCvyJK5cpmmoMcImyh 3po/YTjSdJRYZI9YjLWT1ZDP6TeueBkIqf07uuT9Kk92VWuyfhs=UFIM -----END PGP SIGNATURE----- . Description: Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. JIRA issues fixed (https://issues.jboss.org/): KEYCLOAK-11816 - Tracker bug for the RH-SSO 7.3.5 release for RHEL7 7. Description: AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms. For further information, refer to the release notes linked to in the References section. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: nodejs:10 security update Advisory ID: RHSA-2019:2925-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2925 Issue date: 2019-09-30 CVE Names: CVE-2019-9511 CVE-2019-9512 CVE-2019-9513 CVE-2019-9514 CVE-2019-9515 CVE-2019-9516 CVE-2019-9517 CVE-2019-9518 ===================================================================== 1. Summary: An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs (10.16.3). Security Fix(es): * HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511) * HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512) * HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513) * HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514) * HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515) * HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516) * HTTP/2: request for large response leads to denial of service (CVE-2019-9517) * HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1735645 - CVE-2019-9512 HTTP/2: flood using PING frames results in unbounded memory growth 1735741 - CVE-2019-9513 HTTP/2: flood using PRIORITY frames results in excessive resource consumption 1735744 - CVE-2019-9514 HTTP/2: flood using HEADERS frames results in unbounded memory growth 1735745 - CVE-2019-9515 HTTP/2: flood using SETTINGS frames results in unbounded memory growth 1735749 - CVE-2019-9518 HTTP/2: flood using empty frames results in excessive resource consumption 1741860 - CVE-2019-9511 HTTP/2: large amount of data requests leads to denial of service 1741864 - CVE-2019-9516 HTTP/2: 0-length headers lead to denial of service 1741868 - CVE-2019-9517 HTTP/2: request for large response leads to denial of service 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: nodejs-10.16.3-2.module+el8.0.0+4214+49953fda.src.rpm nodejs-nodemon-1.18.3-1.module+el8+2632+6c5111ed.src.rpm nodejs-packaging-17-3.module+el8+2873+aa7dfd9a.src.rpm aarch64: nodejs-10.16.3-2.module+el8.0.0+4214+49953fda.aarch64.rpm nodejs-debuginfo-10.16.3-2.module+el8.0.0+4214+49953fda.aarch64.rpm nodejs-debugsource-10.16.3-2.module+el8.0.0+4214+49953fda.aarch64.rpm nodejs-devel-10.16.3-2.module+el8.0.0+4214+49953fda.aarch64.rpm npm-6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64.rpm noarch: nodejs-docs-10.16.3-2.module+el8.0.0+4214+49953fda.noarch.rpm nodejs-nodemon-1.18.3-1.module+el8+2632+6c5111ed.noarch.rpm nodejs-packaging-17-3.module+el8+2873+aa7dfd9a.noarch.rpm ppc64le: nodejs-10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le.rpm nodejs-debuginfo-10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le.rpm nodejs-debugsource-10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le.rpm nodejs-devel-10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le.rpm npm-6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le.rpm s390x: nodejs-10.16.3-2.module+el8.0.0+4214+49953fda.s390x.rpm nodejs-debuginfo-10.16.3-2.module+el8.0.0+4214+49953fda.s390x.rpm nodejs-debugsource-10.16.3-2.module+el8.0.0+4214+49953fda.s390x.rpm nodejs-devel-10.16.3-2.module+el8.0.0+4214+49953fda.s390x.rpm npm-6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x.rpm x86_64: nodejs-10.16.3-2.module+el8.0.0+4214+49953fda.x86_64.rpm nodejs-debuginfo-10.16.3-2.module+el8.0.0+4214+49953fda.x86_64.rpm nodejs-debugsource-10.16.3-2.module+el8.0.0+4214+49953fda.x86_64.rpm nodejs-devel-10.16.3-2.module+el8.0.0+4214+49953fda.x86_64.rpm nodejs-devel-debuginfo-10.16.3-2.module+el8.0.0+4214+49953fda.x86_64.rpm npm-6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-9511 https://access.redhat.com/security/cve/CVE-2019-9512 https://access.redhat.com/security/cve/CVE-2019-9513 https://access.redhat.com/security/cve/CVE-2019-9514 https://access.redhat.com/security/cve/CVE-2019-9515 https://access.redhat.com/security/cve/CVE-2019-9516 https://access.redhat.com/security/cve/CVE-2019-9517 https://access.redhat.com/security/cve/CVE-2019-9518 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXZGtHtzjgjWX9erEAQiTyRAAor6sJh3gZ6PZ3xUQhSyFif5kUuLb9dOa gsUrFUW9QjnSD4OeWq0eOJ+W1VkY0WKU0p2KCt4f0R9Msi85EKRzjymM4iv8icMu COL40Wcyvpn2WsdzHrrCT0rM7jiry7YShv/KOlao2wUhkbzs5aHc9D8fBhUvkiCj bHQhrGY+63pnIe6LyCUJ9nEEGPCMaFdpzI+9hDvAevh2ooj6h0PISg/MOb5T7N2z d0RNhrmp5wJUJWbb2hrcnUrbu4CQjf5r44a4R1EdrAL8C+y2vgnVO+wb8RprnMrW 350YueLNrCSYgqeysfbcNG1ccP6iZ/YLCOIOwfb9138cDqelUooAdPKmAj6hY97O pRv1cfc4sBCu1MxhnUgRcY3idmD7qaSbY7lNize04z/HMNK5aq3Kgx5bN/q0OA+n FqWVVCckoFYIn6wWUv1CPlAskpjqns2DPoEd1AUeZH9Efg0JBgKGgQh64T6q20Ua Je5DSConOr149WxNARXWbVz7FhnI+wsDTQzWTk7XuXBfhvSHrfl9tqD444cNP1wm WAvONvS+nlxDOqk4Joo+ZOHA9Wjx/lxciQo6S8aYaQHnCBSUbXAvXjKy0VeoUUdz bD5zrdhbGiSxtR0WNKVP0KVb62P14HGGrceFQRIJPSiqkIrNBS7oeCLuOPpB1QSx J/w0T73QFqQ= =4d1d -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 3.33

sources: NVD: CVE-2019-9512 // CERT/CC: VU#605641 // JVNDB: JVNDB-2019-008112 // VULHUB: VHN-160947 // PACKETSTORM: 158650 // PACKETSTORM: 154458 // PACKETSTORM: 155024 // PACKETSTORM: 155480 // PACKETSTORM: 154430 // PACKETSTORM: 157214 // PACKETSTORM: 155518 // PACKETSTORM: 154475 // PACKETSTORM: 156852 // PACKETSTORM: 154663

AFFECTED PRODUCTS

vendor:apachemodel:traffic serverscope:lteversion:6.2.3

Trust: 1.0

vendor:apachemodel:traffic serverscope:gteversion:6.0.0

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:10.0

Trust: 1.0

vendor:nodejsmodel:node.jsscope:gteversion:8.0.0

Trust: 1.0

vendor:nodejsmodel:node.jsscope:gteversion:10.0.0

Trust: 1.0

vendor:apachemodel:traffic serverscope:gteversion:7.0.0

Trust: 1.0

vendor:nodejsmodel:node.jsscope:ltversion:8.16.1

Trust: 1.0

vendor:applemodel:swiftnioscope:lteversion:1.4.0

Trust: 1.0

vendor:nodejsmodel:node.jsscope:lteversion:8.8.1

Trust: 1.0

vendor:nodejsmodel:node.jsscope:gteversion:12.0.0

Trust: 1.0

vendor:nodejsmodel:node.jsscope:lteversion:10.12.0

Trust: 1.0

vendor:apachemodel:traffic serverscope:lteversion:7.1.6

Trust: 1.0

vendor:nodejsmodel:node.jsscope:ltversion:12.8.1

Trust: 1.0

vendor:apachemodel:traffic serverscope:gteversion:8.0.0

Trust: 1.0

vendor:apachemodel:traffic serverscope:lteversion:8.0.3

Trust: 1.0

vendor:nodejsmodel:node.jsscope:ltversion:10.16.3

Trust: 1.0

vendor:nodejsmodel:node.jsscope:gteversion:10.13.0

Trust: 1.0

vendor:applemodel:swiftnioscope:gteversion:1.0.0

Trust: 1.0

vendor:nodejsmodel:node.jsscope:gteversion:8.9.0

Trust: 1.0

vendor:akamaimodel: - scope: - version: -

Trust: 0.8

vendor:amazonmodel: - scope: - version: -

Trust: 0.8

vendor:apache traffic servermodel: - scope: - version: -

Trust: 0.8

vendor:applemodel: - scope: - version: -

Trust: 0.8

vendor:cloudflaremodel: - scope: - version: -

Trust: 0.8

vendor:envoymodel: - scope: - version: -

Trust: 0.8

vendor:facebookmodel: - scope: - version: -

Trust: 0.8

vendor:go programming languagemodel: - scope: - version: -

Trust: 0.8

vendor:litespeedmodel: - scope: - version: -

Trust: 0.8

vendor:microsoftmodel: - scope: - version: -

Trust: 0.8

vendor:nettymodel: - scope: - version: -

Trust: 0.8

vendor:node jsmodel: - scope: - version: -

Trust: 0.8

vendor:synologymodel: - scope: - version: -

Trust: 0.8

vendor:twistedmodel: - scope: - version: -

Trust: 0.8

vendor:ubuntumodel: - scope: - version: -

Trust: 0.8

vendor:grpcmodel: - scope: - version: -

Trust: 0.8

vendor:nghttp2model: - scope: - version: -

Trust: 0.8

vendor:nginxmodel: - scope: - version: -

Trust: 0.8

vendor:apachemodel:traffic serverscope: - version: -

Trust: 0.8

vendor:debianmodel:gnu/linuxscope: - version: -

Trust: 0.8

vendor:applemodel:swiftnioscope: - version: -

Trust: 0.8

sources: CERT/CC: VU#605641 // JVNDB: JVNDB-2019-008112 // NVD: CVE-2019-9512

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-9512
value: HIGH

Trust: 1.0

cret@cert.org: CVE-2019-9512
value: HIGH

Trust: 1.0

NVD: CVE-2019-9512
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201908-925
value: HIGH

Trust: 0.6

VULHUB: VHN-160947
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2019-9512
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-160947
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

cret@cert.org: CVE-2019-9512
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.0

Trust: 1.8

nvd@nist.gov: CVE-2019-9512
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-160947 // CNNVD: CNNVD-201908-925 // JVNDB: JVNDB-2019-008112 // NVD: CVE-2019-9512 // NVD: CVE-2019-9512

PROBLEMTYPE DATA

problemtype:CWE-400

Trust: 1.9

sources: VULHUB: VHN-160947 // JVNDB: JVNDB-2019-008112 // NVD: CVE-2019-9512

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201908-925

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201908-925

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-008112

PATCH
title:DSA-4503url:https://www.debian.org/security/2019/dsa-4503
Trust: 0.8
title:SwiftNIOurl:https://github.com/apple/swift-nio
Trust: 0.8
title:[ANNOUNCE] Apache Traffic Server is vulnerable to various HTTP/2 attacks (3921083)url:https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04@%3Cusers.trafficserver.apache.org%3E
Trust: 0.8
title:[ANNOUNCE] Apache Traffic Server is vulnerable to various HTTP/2 attacks (ad3d01e)url:https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19@%3Cannounce.trafficserver.apache.org%3E
Trust: 0.8
title:[ANNOUNCE] Apache Traffic Server is vulnerable to various HTTP/2 attacks (bde5230)url:https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7@%3Cdev.trafficserver.apache.org%3E
Trust: 0.8
title:HTTP/2 Remedial measures to achieve security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=96610
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201908-925 // 
            
            
            
            JVNDB: JVNDB-2019-008112

EXTERNAL IDS
db:NVDid:CVE-2019-9512
Trust: 3.5
db:CERT/CCid:VU#605641
Trust: 3.3
db:OPENWALLid:OSS-SECURITY/2019/08/20/1
Trust: 1.7
db:MCAFEEid:SB10296
Trust: 1.7
db:JVNid:JVNVU93696206
Trust: 0.8
db:JVNid:JVNVU98433488
Trust: 0.8
db:JVNDBid:JVNDB-2019-008112
Trust: 0.8
db:CNNVDid:CNNVD-201908-925
Trust: 0.7
db:PACKETSTORMid:155396
Trust: 0.7
db:PACKETSTORMid:156209
Trust: 0.7
db:PACKETSTORMid:155705
Trust: 0.7
db:PACKETSTORMid:158651
Trust: 0.7
db:PACKETSTORMid:157214
Trust: 0.7
db:PACKETSTORMid:156852
Trust: 0.7
db:PACKETSTORMid:155484
Trust: 0.6
db:PACKETSTORMid:157741
Trust: 0.6
db:PACKETSTORMid:156941
Trust: 0.6
db:PACKETSTORMid:158095
Trust: 0.6
db:PACKETSTORMid:156628
Trust: 0.6
db:PACKETSTORMid:155352
Trust: 0.6
db:PACKETSTORMid:155520
Trust: 0.6
db:PACKETSTORMid:154135
Trust: 0.6
db:PACKETSTORMid:155728
Trust: 0.6
db:AUSCERTid:ESB-2019.4238
Trust: 0.6
db:AUSCERTid:ESB-2019.4737
Trust: 0.6
db:AUSCERTid:ESB-2019.4332
Trust: 0.6
db:AUSCERTid:ESB-2020.4324
Trust: 0.6
db:AUSCERTid:ESB-2020.1030
Trust: 0.6
db:AUSCERTid:ESB-2020.2619
Trust: 0.6
db:AUSCERTid:ESB-2019.4533
Trust: 0.6
db:AUSCERTid:ESB-2020.0643
Trust: 0.6
db:AUSCERTid:ESB-2020.1766
Trust: 0.6
db:AUSCERTid:ESB-2019.3152
Trust: 0.6
db:AUSCERTid:ESB-2020.1076
Trust: 0.6
db:AUSCERTid:ESB-2020.0994
Trust: 0.6
db:AUSCERTid:ESB-2019.3114
Trust: 0.6
db:AUSCERTid:ESB-2019.3597.2
Trust: 0.6
db:AUSCERTid:ESB-2020.0007
Trust: 0.6
db:AUSCERTid:ESB-2019.4645
Trust: 0.6
db:AUSCERTid:ESB-2019.4596
Trust: 0.6
db:AUSCERTid:ESB-2019.4586
Trust: 0.6
db:AUSCERTid:ESB-2020.0100
Trust: 0.6
db:AUSCERTid:ESB-2019.4788
Trust: 0.6
db:AUSCERTid:ESB-2020.2071
Trust: 0.6
db:AUSCERTid:ESB-2019.4697
Trust: 0.6
db:AUSCERTid:ESB-2019.4484
Trust: 0.6
db:AUSCERTid:ESB-2020.1335
Trust: 0.6
db:AUSCERTid:ESB-2020.1427
Trust: 0.6
db:AUSCERTid:ESB-2019.4368
Trust: 0.6
db:AUSCERTid:ESB-2019.4665
Trust: 0.6
db:AUSCERTid:ESB-2020.0832
Trust: 0.6
db:AUSCERTid:ESB-2019.3597.3
Trust: 0.6
db:NSFOCUSid:43919
Trust: 0.6
db:CS-HELPid:SB2022072128
Trust: 0.6
db:ICS CERTid:ICSA-19-346-01
Trust: 0.6
db:PACKETSTORMid:155024
Trust: 0.2
db:PACKETSTORMid:154430
Trust: 0.2
db:PACKETSTORMid:158650
Trust: 0.2
db:PACKETSTORMid:154475
Trust: 0.2
db:PACKETSTORMid:154888
Trust: 0.1
db:PACKETSTORMid:154444
Trust: 0.1
db:PACKETSTORMid:154396
Trust: 0.1
db:PACKETSTORMid:154525
Trust: 0.1
db:PACKETSTORMid:154222
Trust: 0.1
db:PACKETSTORMid:155037
Trust: 0.1
db:PACKETSTORMid:154638
Trust: 0.1
db:PACKETSTORMid:154058
Trust: 0.1
db:PACKETSTORMid:154425
Trust: 0.1
db:VULHUBid:VHN-160947
Trust: 0.1
db:PACKETSTORMid:154458
Trust: 0.1
db:PACKETSTORMid:155480
Trust: 0.1
db:PACKETSTORMid:155518
Trust: 0.1
db:PACKETSTORMid:154663
Trust: 0.1
sources:
            
            
            CERT/CC: VU#605641 // 
            
            
            
            VULHUB: VHN-160947 // 
            
            
            
            PACKETSTORM: 158650 // 
            
            
            
            PACKETSTORM: 154458 // 
            
            
            
            PACKETSTORM: 155024 // 
            
            
            
            PACKETSTORM: 155480 // 
            
            
            
            PACKETSTORM: 154430 // 
            
            
            
            PACKETSTORM: 157214 // 
            
            
            
            PACKETSTORM: 155518 // 
            
            
            
            PACKETSTORM: 154475 // 
            
            
            
            PACKETSTORM: 156852 // 
            
            
            
            PACKETSTORM: 154663 // 
            
            
            
            CNNVD: CNNVD-201908-925 // 
            
            
            
            JVNDB: JVNDB-2019-008112 // 
            
            
            
            NVD: CVE-2019-9512

REFERENCES
url:https://www.debian.org/security/2019/dsa-4503
Trust: 2.9
url:https://github.com/netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
Trust: 2.5
url:https://www.synology.com/security/advisory/synology_sa_19_33
Trust: 2.5
url:https://seclists.org/bugtraq/2019/aug/24
Trust: 2.5
url:https://kb.cert.org/vuls/id/605641/
Trust: 2.5
url:https://access.redhat.com/errata/rhsa-2019:4021
Trust: 2.4
url:https://access.redhat.com/errata/rhsa-2019:4041
Trust: 2.4
url:https://nvd.nist.gov/vuln/detail/cve-2019-9512
Trust: 2.4
url:https://access.redhat.com/errata/rhsa-2019:3892
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4018
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4019
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4020
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4040
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4042
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4045
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4269
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4273
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:4352
Trust: 2.3
url:https://access.redhat.com/errata/rhsa-2019:2690
Trust: 1.8
url:https://access.redhat.com/errata/rhsa-2019:2766
Trust: 1.8
url:https://access.redhat.com/errata/rhsa-2019:2925
Trust: 1.8
url:https://access.redhat.com/errata/rhsa-2019:3245
Trust: 1.8
url:https://seclists.org/bugtraq/2019/aug/31
Trust: 1.7
url:https://seclists.org/bugtraq/2019/aug/43
Trust: 1.7
url:https://seclists.org/bugtraq/2019/sep/18
Trust: 1.7
url:https://security.netapp.com/advisory/ntap-20190823-0001/
Trust: 1.7
url:https://security.netapp.com/advisory/ntap-20190823-0004/
Trust: 1.7
url:https://security.netapp.com/advisory/ntap-20190823-0005/
Trust: 1.7
url:https://support.f5.com/csp/article/k98053339
Trust: 1.7
url:https://www.debian.org/security/2019/dsa-4508
Trust: 1.7
url:https://www.debian.org/security/2019/dsa-4520
Trust: 1.7
url:http://seclists.org/fulldisclosure/2019/aug/16
Trust: 1.7
url:https://lists.debian.org/debian-lts-announce/2020/12/msg00011.html
Trust: 1.7
url:http://www.openwall.com/lists/oss-security/2019/08/20/1
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2594
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2661
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2682
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2726
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2769
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2796
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2861
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2939
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2955
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:2966
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:3131
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:3265
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2019:3906
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2020:0406
Trust: 1.7
url:https://access.redhat.com/errata/rhsa-2020:0727
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00021.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00038.html
Trust: 1.7
url:https://usn.ubuntu.com/4308-1/
Trust: 1.7
url:https://blogs.akamai.com/sitr/2019/08/http2-vulnerabilities.html
Trust: 1.6
url:https://kc.mcafee.com/corporate/index?page=content&id=sb10296
Trust: 1.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9512
Trust: 1.4
url:https://nvd.nist.gov/vuln/detail/cve-2019-9514
Trust: 1.0
url:https://support.f5.com/csp/article/k98053339?utm_source=f5support&amp%3butm_medium=rss
Trust: 1.0
url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/
Trust: 1.0
url:https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3cannounce.trafficserver.apache.org%3e
Trust: 1.0
url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4bbp27pzgsy6op6d26e5fw4gzkbfhnu7/
Trust: 1.0
url:https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3cusers.trafficserver.apache.org%3e
Trust: 1.0
url:https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7%40%3cdev.trafficserver.apache.org%3e
Trust: 1.0
url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/
Trust: 1.0
url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/lyo6e3h34c346d2e443glxk7ok6kiyiq/
Trust: 1.0
url:https://access.redhat.com/security/cve/cve-2019-9512
Trust: 0.9
url:https://access.redhat.com/security/updates/classification/#important
Trust: 0.9
url:https://access.redhat.com/security/cve/cve-2019-9514
Trust: 0.9
url:https://access.redhat.com/security/team/contact/
Trust: 0.9
url:https://www.redhat.com/mailman/listinfo/rhsa-announce
Trust: 0.9
url:https://bugzilla.redhat.com/):
Trust: 0.9
url:https://vuls.cert.org/confluence/pages/viewpage.action?pageid=56393752
Trust: 0.8
url:https://tools.ietf.org/html/rfc7540
Trust: 0.8
url:https://tools.ietf.org/html/rfc7541
Trust: 0.8
url:https://blog.cloudflare.com/on-the-recent-http-2-dos-attacks/
Trust: 0.8
url:https://blog.litespeedtech.com/2019/08/15/litespeed-addresses-http-2-dos-advisories/
Trust: 0.8
url:https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9511https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9512https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9513https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9514https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9518
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-9515
Trust: 0.8
url:https://jvn.jp/vu/jvnvu98433488/
Trust: 0.8
url:https://jvn.jp/vu/jvnvu93696206/
Trust: 0.8
url:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/lyo6e3h34c346d2e443glxk7ok6kiyiq/
Trust: 0.7
url:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/
Trust: 0.7
url:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4bbp27pzgsy6op6d26e5fw4gzkbfhnu7/
Trust: 0.7
url:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/
Trust: 0.7
url:https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19@%3cannounce.trafficserver.apache.org%3e
Trust: 0.7
url:https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7@%3cdev.trafficserver.apache.org%3e
Trust: 0.7
url:https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04@%3cusers.trafficserver.apache.org%3e
Trust: 0.7
url:https://access.redhat.com/security/cve/cve-2019-9515
Trust: 0.7
url:http2-cves/
Trust: 0.6
url:https://www.cloudfoundry.org/blog/various-
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9518
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9517
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9516
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9515
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9514
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9513
Trust: 0.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9511
Trust: 0.6
url:https://support.f5.com/csp/article/k98053339?utm_source=f5support&utm_medium=rss
Trust: 0.6
url:https://support.apple.com/en-au/ht210436
Trust: 0.6
url:https://support.f5.com/csp/article/k50233772
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1126605
Trust: 0.6
url:https://www.suse.com/support/update/announcement/2019/suse-su-201914246-1.html
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1104951
Trust: 0.6
url:https://access.redhat.com/errata/rhsa-2019:3905
Trust: 0.6
url:https://www.us-cert.gov/ics/advisories/icsa-19-346-01
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1109787
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1109781
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1108515
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1109775
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1165894
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1165906
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1135167
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1164346
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1164364
Trust: 0.6
url:https://www.suse.com/support/update/announcement/2020/suse-su-20200059-1.html
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-dependent-libraries-affect-ibm-db2-leading-to-denial-of-service-or-privilege-escalation/
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1128387
Trust: 0.6
url:https://packetstormsecurity.com/files/157214/red-hat-security-advisory-2020-1445-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4368/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4788/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4586/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0994/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-node-js-affect-ibm-spectrum-protect-plus-cve-2019-15606-cve-2019-15604-cve-2019-15605-cve-2019-9511-cve-2019-9516-cve-2019-9512-cve-2019-9517-cve-2019-951/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4332/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0643/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4484/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-have-been-identified-in-db2-that-affect-the-ibm-performance-management-product/
Trust: 0.6
url:http2-implementation-vulnerablility/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-websphere-liberty-susceptible-to-
Trust: 0.6
url:https://packetstormsecurity.com/files/155728/red-hat-security-advisory-2019-4352-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2619/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.3114/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-kubernetes-affect-ibm-infosphere-information-server/
Trust: 0.6
url:https://portal.msrc.microsoft.com/zh-cn/security-guidance/advisory/cve-2019-9512
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-websphere-application-server-liberty-affect-ibm-spectrum-protect-operations-center-and-client-management-service/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.1335/
Trust: 0.6
url:https://packetstormsecurity.com/files/157741/red-hat-security-advisory-2020-2067-01.html
Trust: 0.6
url:https://packetstormsecurity.com/files/156209/red-hat-security-advisory-2020-0406-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.3597.3/
Trust: 0.6
url:https://packetstormsecurity.com/files/158095/red-hat-security-advisory-2020-2565-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4737/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0832/
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1137466
Trust: 0.6
url:http://www.nsfocus.net/vulndb/43919
Trust: 0.6
url:https://vigilance.fr/vulnerability/http-2-multiple-vulnerabilities-30040
Trust: 0.6
url:https://packetstormsecurity.com/files/155484/red-hat-security-advisory-2019-4019-01.html
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-netty-affect-ibm-operations-analytics-predictive-insights-cve-2019-9514-cve-2019-9512-cve-2019-9518-cve-2019-9515/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.1076/
Trust: 0.6
url:https://packetstormsecurity.com/files/156628/red-hat-security-advisory-2020-0727-01.html
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-dependent-libraries-affect-ibm-db2-leading-to-denial-of-service-or-privilege-escalation-3/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2071/
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1127397
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.1427/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4645/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.3597.2/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4665/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-netty/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-netty-affect-ibm-netcool-agile-service-manager/
Trust: 0.6
url:https://pivotal.io/security/cve-2019-9517
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4697/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-db2-warehouse-has-released-a-fix-in-response-to-multiple-vulnerabilities-found-in-ibm-db2/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-transformation-advisor-is-affected-by-vulnerabilities-in-websphere-application-server-liberty-cve-2019-9515-cve-2019-9518-cve-2019-9517-cve-2019-9512-cve-2019-9514-c/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4596/
Trust: 0.6
url:https://support.apple.com/en-us/ht210436
Trust: 0.6
url:https://packetstormsecurity.com/files/155520/red-hat-security-advisory-2019-4045-01.html
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-ibm-db2-and-ibm-java-runtime-affect-ibm-spectrum-protect-server/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-in-ibm-websphere-application-server-affect-ibm-sterling-b2b-integrator/
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1128279
Trust: 0.6
url:https://packetstormsecurity.com/files/156852/red-hat-security-advisory-2020-0922-01.html
Trust: 0.6
url:https://packetstormsecurity.com/files/156941/red-hat-security-advisory-2020-0983-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.1766/
Trust: 0.6
url:https://packetstormsecurity.com/files/154135/debian-security-advisory-4503-1.html
Trust: 0.6
url:https://www.cybersecurity-help.cz/vdb/sb2022072128
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.3152/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-dependent-libraries-affect-ibm-db2-leading-to-denial-of-service-or-privilege-escalation-2/
Trust: 0.6
url:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-is-affected-by-multiple-vulnerabilities-in-websphere-application-server-liberty/
Trust: 0.6
url:https://packetstormsecurity.com/files/158651/red-hat-security-advisory-2020-3197-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.4324/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4533/
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1150960
Trust: 0.6
url:https://packetstormsecurity.com/files/155396/red-hat-security-advisory-2019-3906-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0100/
Trust: 0.6
url:https://packetstormsecurity.com/files/155705/red-hat-security-advisory-2019-4273-01.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0007/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4238/
Trust: 0.6
url:https://packetstormsecurity.com/files/155352/red-hat-security-advisory-2019-3892-01.html
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1165852
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.1030/
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1127853
Trust: 0.6
url:https://www.ibm.com/support/pages/node/1168528
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2019-9518
Trust: 0.5
url:https://access.redhat.com/security/cve/cve-2019-9518
Trust: 0.4
url:https://access.redhat.com/security/team/key/
Trust: 0.4
url:https://access.redhat.com/security/cve/cve-2019-9511
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2019-9511
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2019-20444
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2019-20445
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2019-20444
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2019-16869
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2020-7238
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2020-7238
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2019-16869
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2019-20445
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2019-9517
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2019-9517
Trust: 0.3
url:https://access.redhat.com/security/cve/cve-2019-9516
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2019-9516
Trust: 0.3
url:https://issues.jboss.org/):
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-14843
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2019-14838
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2019-14843
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-14838
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2019-0222
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-10247
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-0222
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-10241
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2019-10247
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2019-10241
Trust: 0.2
url:https://access.redhat.com/articles/11258
Trust: 0.2
url:https://kc.mcafee.com/corporate/index?page=content&amp;id=sb10296
Trust: 0.1
url:https://support.f5.com/csp/article/k98053339?utm_source=f5support&amp;amp;utm_medium=rss
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14060
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-11112
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-12406
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-9547
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-11113
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-10968
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-17573
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-1718
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-9546
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-14060
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-13990
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-11620
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-10672
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-12406
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-17573
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-11612
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-20330
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-14061
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-11619
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-10673
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-1718
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-9548
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-13990
Trust: 0.1
url:https://access.redhat.com/errata/rhsa-2020:3196
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-14062
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-8840
Trust: 0.1
url:https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions&product=rhdm&version=7.8.0
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-10672
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-10969
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-11619
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-11620
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-11111
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-20330
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-12423
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-11112
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-11612
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-12423
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-10968
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_decision_manager/7.8/html/release_notes_for_red_hat_decision_manager_7.8/index
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-11111
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-10969
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14061
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-11113
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14062
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-10673
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-11247
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-11247
Trust: 0.1
url:https://docs.openshift.com/container-platform/3.10/release_notes/ocp_3_10_r
Trust: 0.1
url:https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-rel
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
Trust: 0.1
url:https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?product=appplatform&downloadtype=securitypatches&version=7.2
Trust: 0.1
url:https://www.debian.org/security/faq
Trust: 0.1
url:https://www.debian.org/security/
Trust: 0.1
url:https://security-tracker.debian.org/tracker/trafficserver
Trust: 0.1
url:https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions&product=jboss.amq.broker&version=7.4.3
Trust: 0.1
url:https://access.redhat.com/errata/rhsa-2020:1445
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.3/
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-14837
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-14837
Trust: 0.1
url:https://docs.openshift.com/container-platform/4.1/release_notes/ocp-4-1-rel
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/
Trust: 0.1
url:https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions&product=jboss.amq.broker&version=7.6.0&productchanged=yes
Trust: 0.1
url:https://access.redhat.com/errata/rhsa-2020:0922
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-9513
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-9513
Trust: 0.1
sources:
            
            
            CERT/CC: VU#605641 // 
            
            
            
            VULHUB: VHN-160947 // 
            
            
            
            PACKETSTORM: 158650 // 
            
            
            
            PACKETSTORM: 154458 // 
            
            
            
            PACKETSTORM: 155024 // 
            
            
            
            PACKETSTORM: 155480 // 
            
            
            
            PACKETSTORM: 154430 // 
            
            
            
            PACKETSTORM: 157214 // 
            
            
            
            PACKETSTORM: 155518 // 
            
            
            
            PACKETSTORM: 154475 // 
            
            
            
            PACKETSTORM: 156852 // 
            
            
            
            PACKETSTORM: 154663 // 
            
            
            
            CNNVD: CNNVD-201908-925 // 
            
            
            
            JVNDB: JVNDB-2019-008112 // 
            
            
            
            NVD: CVE-2019-9512

CREDITS
Red Hat
Trust: 0.9
sources:
            
            
            PACKETSTORM: 158650 // 
            
            
            
            PACKETSTORM: 154458 // 
            
            
            
            PACKETSTORM: 155024 // 
            
            
            
            PACKETSTORM: 155480 // 
            
            
            
            PACKETSTORM: 157214 // 
            
            
            
            PACKETSTORM: 155518 // 
            
            
            
            PACKETSTORM: 154475 // 
            
            
            
            PACKETSTORM: 156852 // 
            
            
            
            PACKETSTORM: 154663

SOURCES
db:CERT/CCid:VU#605641
db:VULHUBid:VHN-160947
db:PACKETSTORMid:158650
db:PACKETSTORMid:154458
db:PACKETSTORMid:155024
db:PACKETSTORMid:155480
db:PACKETSTORMid:154430
db:PACKETSTORMid:157214
db:PACKETSTORMid:155518
db:PACKETSTORMid:154475
db:PACKETSTORMid:156852
db:PACKETSTORMid:154663
db:CNNVDid:CNNVD-201908-925
db:JVNDBid:JVNDB-2019-008112
db:NVDid:CVE-2019-9512

LAST UPDATE DATE
2026-03-23T21:55:15.089000+00:00

SOURCES UPDATE DATE
db:CERT/CCid:VU#605641date:2019-11-19T00:00:00
db:VULHUBid:VHN-160947date:2019-08-23T00:00:00
db:CNNVDid:CNNVD-201908-925date:2022-07-22T00:00:00
db:JVNDBid:JVNDB-2019-008112date:2019-08-26T00:00:00
db:NVDid:CVE-2019-9512date:2024-11-21T04:51:46.193

SOURCES RELEASE DATE
db:CERT/CCid:VU#605641date:2019-08-13T00:00:00
db:VULHUBid:VHN-160947date:2019-08-13T00:00:00
db:PACKETSTORMid:158650date:2020-07-29T17:52:58
db:PACKETSTORMid:154458date:2019-09-11T19:58:47
db:PACKETSTORMid:155024date:2019-10-30T15:51:48
db:PACKETSTORMid:155480date:2019-11-27T15:38:24
db:PACKETSTORMid:154430date:2019-09-10T23:12:17
db:PACKETSTORMid:157214date:2020-04-14T15:39:41
db:PACKETSTORMid:155518date:2019-12-02T19:20:11
db:PACKETSTORMid:154475date:2019-09-12T20:40:57
db:PACKETSTORMid:156852date:2020-03-23T15:57:42
db:PACKETSTORMid:154663date:2019-09-30T13:33:33
db:CNNVDid:CNNVD-201908-925date:2019-08-13T00:00:00
db:JVNDBid:JVNDB-2019-008112date:2019-08-26T00:00:00
db:NVDid:CVE-2019-9512date:2019-08-13T21:15:12.287