HTTP2: Microsoft Windows IIS HTTP2 Data Dribble Denial of Service

This signature detects attempts to exploit a known vulnerability against Microsoft Windows IIS. A successful attack can result in a denial-of-service condition.

Extended Description

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

Affected Products

Nodejs node.js

References

CVE: CVE-2019-9511

URL: https://github.com/netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md

Short Name

HTTP2:MS-IIS-DRIBBLE-DOS

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP2: Microsoft Windows IIS HTTP2 Data Dribble Denial of Service

Extended Description

Affected Products

References

Found a potential security threat?