HTTP2: Microsoft Windows IIS HTTP2 Reset Flood Denial of Service

This signature detects attempts to exploit a known vulnerability against Microsoft Windows IIS Server. A successful attack can result in a denial-of-service condition.

Extended Description

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.

Affected Products

Nodejs node.js

References

CVE: CVE-2019-9514

URL: https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md

Short Name

HTTP2:RESET-FLOOD-DOS

Severity

Major

Recommended

False

Recommended Action

None

HTTP2: Microsoft Windows IIS HTTP2 Reset Flood Denial of Service

Extended Description

Affected Products

References

Found a potential security threat?