[UPDATE] [mittel] http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-21 11:20 UTC
  • Importiert: 2026-10-21 17:33 UTC
  • Quelle-ID: cert_bund
  • uid_hash: a9284b9ae88c3df8c1c3cedaaa03d5cdf00459139f07721da4420d703d538ef3

Inhalt

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiednen http/2 Implementierungen ausnutzen, um einen Denial of Service Angriff durchzuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-48989

MEDIUM

HIGH

7.5

2025-08-13

CVE-2025-5115

MEDIUM

HIGH

7.7

2025-08-20

CVE-2025-55163

MEDIUM

HIGH

8.2

2025-08-13

CVE-2025-8671

MEDIUM

HIGH

7.5

2025-08-13

Externe Referenzen

Bezeichnung Typ CVE Quelle

Red Hat Security Advisory RHSA-2025:13685 vom 2025-08-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:13686 vom 2025-08-13

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14004 vom 2025-08-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14008 vom 2025-08-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14177 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14178 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14179 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14180 vom 2025-08-21

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14181 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14182 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14183 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14197 vom 2025-08-20

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14911 vom 2025-08-28

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:14919 vom 2025-09-03

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:15612 vom 2025-09-10

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:15697 vom 2025-09-11

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16407 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16454 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16455 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16456 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16457 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16459 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16460 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16462 vom 2025-09-23

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:16989 vom 2025-09-29

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:17298 vom 2025-10-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:17299 vom 2025-10-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:17317 vom 2025-10-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:17318 vom 2025-10-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:17567 vom 2025-10-08

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:18989 vom 2025-10-22

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:19094 vom 2025-10-24

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22924 vom 2025-12-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:22925 vom 2025-12-09

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2025:23417 vom 2025-12-17

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:0742 vom 2026-01-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:0743 vom 2026-01-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4915 vom 2026-03-18

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4916 vom 2026-03-18

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4917 vom 2026-03-18

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:4924 vom 2026-03-18

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:62260 vom 2026-09-02

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2TOMCAT9-2025-022 vom 2025-09-04

EXTERNAL - wid_csaf

Fedora Security Advisory FEDORA-2025-2FF6E32273 vom 2025-10-30

EXTERNAL - wid_csaf

Atlassian Security Bulletin - November 18 2025

EXTERNAL - wid_csaf

Atlassian Security Bulletin

EXTERNAL - wid_csaf

Camunda Security Notice 144 vom 2025-08-28

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2025:14177 vom 2025-09-08

EXTERNAL - wid_csaf

Gal Bar Nahum's Blog - MadeYouReset Series vom 2025-08-13

EXTERNAL - wid_csaf

PoC CVE-2025-8671 vom 2025-08-24

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-MMXM-8W33-WC4H vom 2025-08-20

EXTERNAL - wid_csaf

Atlassian Security Bulletin

EXTERNAL - wid_csaf

CERT/CC VU#767506 vom 2025-08-13

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-14177 vom 2025-08-21

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-14178 vom 2025-08-21

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-14179 vom 2025-08-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2025-14181 vom 2025-08-21

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4299 vom 2025-09-14

EXTERNAL - wid_csaf

Debian Security Advisory DLA-4519 vom 2026-03-31

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6005 vom 2025-09-19

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6006 vom 2025-09-19

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6120 vom 2026-02-05

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6121 vom 2026-02-05

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:10219-1 vom 2026-02-19

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:15483-1 vom 2025-08-23

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:15490-1 vom 2025-08-26

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:22131-1 vom 2026-10-20

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:15449-1 vom 2025-08-16

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:15491-1 vom 2025-08-26

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2025:15489-1 vom 2025-08-26

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02993-2 vom 2025-09-01

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02992-1 vom 2025-08-27

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02993-1 vom 2025-08-27

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:03006-1 vom 2025-08-28

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:03021-1 vom 2025-08-29

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:03024-1 vom 2025-08-29

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:02993-2 vom 2025-09-01

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2025:03114-1 vom 2025-09-09

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1058-1 vom 2026-03-26

EXTERNAL - wid_csaf

Mailing List OSS Security vom 2025-08-13

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6160 vom 2026-03-12

EXTERNAL - wid_csaf

XEROX Security Advisory XRX25-018 vom 2025-11-18

EXTERNAL - wid_csaf

NetApp Security Advisory NTAP-20251003-0005 vom 2025-10-03

EXTERNAL - wid_csaf

HCL Security Bulletin vom 2025-10-15

EXTERNAL - wid_csaf

Tomcat 10 Security vom 2025-08-13

EXTERNAL - wid_csaf

Tomcat 11 Security vom 2025-08-13

EXTERNAL - wid_csaf

Tomcat 9 Security vom 2025-08-13

EXTERNAL - wid_csaf

New Varnish Cache releases (7.7.3, 7.6.5 and 6.0.16) vom 2025-08-20

EXTERNAL - wid_csaf

Varnish Security Advisory VSV00017 vom 2025-08-13

EXTERNAL - wid_csaf

ATOSS Sicherheitsmitteilung: Apache Tomcat-Sicherheitslücken vom 2025-08-28

EXTERNAL - wid_csaf

Dell Security Advisory DSA-2025-390 vom 2025-11-05

EXTERNAL - wid_csaf

Dell Security Advisory DSA-2025-365 vom 2025-12-01

EXTERNAL - wid_csaf

Dell Security Advisory DSA-2026-152 vom 2026-03-23

EXTERNAL - wid_csaf

IBM Security Bulletin 7246095 vom 2025-09-29

EXTERNAL - wid_csaf

IBM Security Bulletin 7247555 vom 2025-10-09

EXTERNAL - wid_csaf

IBM Security Bulletin 7248973 vom 2025-10-23

EXTERNAL - wid_csaf

IBM Security Bulletin 7249276 vom 2025-10-27

EXTERNAL - wid_csaf

IBM Security Bulletin 7252039 vom 2025-11-20

EXTERNAL - wid_csaf

IBM Security Bulletin 7252567 vom 2025-11-26

EXTERNAL - wid_csaf

IBM Security Bulletin 7255296 vom 2026-01-21

EXTERNAL - wid_csaf

IBM Security Bulletin 7257633 vom 2026-01-29

EXTERNAL - wid_csaf

IBM Security Bulletin 7270885 vom 2026-04-27

EXTERNAL - wid_csaf

PDFreactor Release Notes vom 2025-09-05

EXTERNAL - wid_csaf

PDFreactor ReleaseNotes vom 2025-12-04

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss