CVE-2019-9515

Summary

CVE-2019-9515 is a denial-of-service vulnerability affecting certain HTTP/2 implementations. malicious actors can exploit this weakness by flooding the targeted system with a high volume of SETTINGS frames. Since the recipient is required by the RFC to respond with an acknowledgement for each frame, an empty SETTINGS frame behaves similarly to a ping. This excessive data processing can lead to significant CPU and memory consumption, potentially causing a denial-of-service condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.