Description
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
Remediation
References
Related Vulnerabilities
SugarCRM Improper Input Validation Vulnerability (CVE-2012-0694)
WordPress Other Vulnerability (CVE-2005-1810)
Moodle Improper Authentication Vulnerability (CVE-2018-1082)
MySQL Resource Management Errors Vulnerability (CVE-2010-3678)
WordPress Plugin Ultimate WordPress Auction Cross-Site Request Forgery (1.0.0)